摘要 |
The present invention relates to a method and a device for blocking distributed denial of service (DDoS). The method for blocking DDoS according to an embodiment of the present invention comprises the steps of: receiving an HTTP packet from a source ID; determining whether a GET method is included in an HTTP request line of the HTTP packet or not; determining whether an uniform resource identifier (URI) requested by the GET method is a text or an image if it is determined the GET method is included in the HTTP request line of the HTTP packet; increasing a text counter if the URI requested by the GET method is the text, and increasing an image counter if the URI requested by the GET method is the image; and blocking a packet received from the source IP by comparing the text counter with the image counter. |