PROTECTION METHOD AND SYSTEM FOR DISTRIBUTED DENIAL OF SERVICE ATTACK

摘要

A protection method for a distributed denial of service attack includes: segmenting a network based on source IP addresses of traffic; monitoring the traffic to detect occurrence of the distributed denial of service attack and find an attack target server; and performing, on segments in which traffic toward the attack target server exceeds a specific threshold value, filtering for traffic restriction. Preferably, in segmenting the network, an entire IP area of the network is segmented into main-segments and each of the main-segments is segmented into sub-segments.