Construction Of Zibo CNC IDC Anti-DDoS System

Internet has embed into people's life, at the same time, all kinds of problems about network security stands out. Dos(Denial of service) attack has become a common attacking method because it is very easy to implement and difficult to be defended and detected. There are very few effective methods to deal with Dos attack. Besides all kinds of traditional methods, a necessary method for user to provide good network service is using the devices against DDos(distributed denial of service).The IDC system against DDoS attacks in Zibo branch of CNC makes use of a device against DDoS attacks named "Collapsar" which is made in NsFocus company. In this paper, we take the construction of IDC system against DDoS attacks for example to analyze how to deploy the device-"Collapsar" against DDoS attacks in the network with a large scale and complex framework. By this way, we can not only defend DDoS attacks but also make network run well.This paper introduces the IDC system against DDoS attacks in Zibo branch of CNC. Firstly, we introduce what are Dos and DDoS attacks and the methods and theory of DDoS attacks. And then point out the necessaries, requirements and techniques of defending DDoS attacks. We introduce the "Collapsar" system and some deployments of this system. Based on above knowledge, we present a scheme of the IDC system against DDoS attacks in Zibo branch of CNC. In addition, the requirement and the principle of deployment in the scheme are explained. We illuminate the concrete deployment, including the deployments of routers, Collapsar Probe device and Collapsar Defender device. As a result, an integrative deployment scheme against DDoS attacks is formed. Finally, we compare the different effects before and after system deployment and show the effect of the deployment by some data.By constructing IDC system against DDoS attacks, the security of network in Zibo branch of CNC is improved greatly. The IDC system has succeeded in defending against a large scale of DDoS attacks for several times. It sufficiently proves the "Collapsar" system's dependability and powerful functions. The success of defending in entire network also proves the rationality of scheme and implement.