Design And Implementation Enhanced-security System On Automatic Self-Allocating System(ASAS-ES)

Networking attack has a tendency to become more and more complicated and frequent, and getting related attacking tools and starting the attacking activity become much easier than before. Large amount of networking attack activities and attacking cases will result in huge destroy and damage of the users'resources and has a great threat to the benefit of the network users.Traditional network security system depends on cryptography, credible calculation basis, certification, firewall, accessing control and other peripheral security components to defend attacking and intrusion activities.This means could satisfy the needs of some users, but there has been a great deficiency on the aspect of whole system security. Security defense of sever has experienced from passive protection to deep defense and to defense actively.Firewall system and Intrusion Detection System, which could provide with the function of attacking recognition and packet filtering protection, are regarded as the main security components in passive protection. Active protection puts emphasis on intrusion recognition and packet filtering. Currently, active defense technology research is the hot issue, it combines traditional network security system with Intrusion Defense System and could ensure the availability of system from many aspects.This dissertation mainly study the application of active defense technology in Automatic Self-Allocating System cluster, it designs and implements Enhanced- Security system on Automatic Self-Allocating System. Compared with other intrusion defense system, it fully combines with the Automatic Self-Allocating Server cluster and lower the performance influence from loading intrusion defense module to the ASAS as small as possible.Firstly, it introduces the current situation of the intrusion defense system and then gives an introduction to the ASAS, intrusion defense system and traffic control technology. Then it designs a new detection method to DDoS attacking with combining the current intrusion defense method to DDoS attacking. Finally, it introduces the ASAS-ES design and makes a detailed function and performance assessment to whole design of ASAS-ES.