| 摘要 |
The present invention relates to a system and a method of arranging interior routing of AS for DDoS attack protection, in particular, comprises normal routing mode, preventive routing mode and protected routing mode, and relates to a system and a method, of arranging interior routing of AS for DDoS attack protection, which are capable of providing accurate bypass and blockage which were not done at Shield. The present invention in an AS interior routing arrangement system for DDoS attack protection comprises: an sShield operating according to three-step routing mode wherein the three-step routing mode is normal routing mode, preventive routing mode and protected routing mode, and the sShield does not operate and any traffic does not pass through the sShield in ordinary times, converts a mode into the preventive routing mode and changes a path into the sShield when an AS recognizes a suspicious traffic through many paths, and converts the mode into the protected routing mode and blocks the bad traffic when an actual attack is in progress. |
