Research On Defending DDoS Offense Based On Cloud Computing

DDoS(Distributed Denial of Service) is one kind of attack that exhaust the victim host’s resources. In recent years, with the rapid development of cloud computing, DDoS begins to attack cloud environment and the attack aim point to the application of basic implementation. Through for the intrusion of DDoS attack detection technology has been mature at present. In cloud environment, DDoS attack demonstrate the new features, as a consequence, we need to research about the DDoS in cloud environment.Firstly, this paper introduces the principle and development about DDoS. What’s more, it also presents the characteristic of cloud computing and hidden danger in cloud environment. Secondly, this paper proposes a attack defense model based on the model’s design requirements, design goal and the Characteristic about DDoS in cloud environment. Its name is DDCC model.:(1)Proposes the application detecting method based on the research of DDoS in cloud environment, detect the DDoS attack flow accurately by using detecting method. Through the use of feature detection method based on the combination of behavior and based detection method to detect the network flow.(2)Proposed the flow control algorithm when happens the DDoS attack. Using this algorithm with the strong computing ability and storage ability of cloud computing, we can adjust the network transmission quality.(3)Design based on distributed defense of DDoS attack model, each module work in cooperation with a due division of labor. Through the management module to schedule each module to defense DDoS commonly.Lastly, this paper simulated the detection algorithm and based on the rate limiting algorithm, we verified the effectiveness of the two algorithms with experiments. At the end of paper, we uses speculative knowledge to analysis the model and prospects the future work.