Apparatus for detecting and filtering DDoS attack based on request URI type

摘要

PURPOSE: An URI(Uniform Resource ID) type based DDoS attack detecting apparatus is provided to perform counting mechanism against a DDoS attack with minimized calculation quantity. CONSTITUTION: A receiver(132) receives an HTTP(Hypertext Transfer Protocol) request from a client terminal of a specified IP(Internet Protocol). A data measurer(134) calculates the number of a specific URI among the HTTP request by an IP. If the number of specific URI is larger than a threshold value, a DDoS(Distributed Denial of Service) determiner(136) detects the access of the client terminal as a DDoS attack. If the DDoS attack is detected, a cut-off unit(138) blocks the connection of the client terminal.