Research And Implementation Of The DDoS Attack Detection Algorithm Based On TCP Backlog

The distributed denial of service attacks(DDoS) developing from denial of service attacks(DoS) has become one of the major threats to network security.In recent years,with increased network bandwidth,DDoS mainly make effect through consumption of illegal occupation of the host resources.This paper first introduces the concept of a DDoS,the study status of DDoS attack at home and abroad.Then it introduces the basic principles of commonly used methods and tools,common defense style for DDoS attack.The article starts from the analysis of TCP Backlog,and proposes an algorithm based on TCP Backlog detection.Algorithm analyzes TCP Backlog combing with historical connected records,generates features vectors,detects abnormal level of TCP Backlog using BP Neural Networks,then determines whether attack happens according to the abnormal level.Algorithm detects DDoS attack quickly and accurately,and prevents the occurrence of DDoS attack effectively.