| 摘要 |
A method for cooperatively defending of a DDoS(Distributed Denial of Service) attack using a statistical detection is provided to detect the DDoS attack by cooperate with detection units of attack source and destination networks, thereby exactly detecting the DDoS attack. A method for cooperatively defending of a DDoS(Distributed Denial of Service) attack using a statistical detection comprises the following steps of: detecting the DDoS attack by calculating a determination factor value of the DDoS attack for a packet transceived through a detection unit of an attack source network, and generating a first attack detection message; detecting the DDoS attack by calculating a determination factor value of the DDoS attack for a packet transceived through a detection unit of an attack destination network, and generating a second attack detection message; receiving the first and second attack detection messages from the detection units of the attack source and destination networks(S41); searching a first attack detection message consistent with a detection time or a destination address included in the second attack detection message(S42,S43); if so, fixing detection of the DDoS attack(S44); and transmitting an attack defend message to the detection unit of the attack source network generating the searched first attack detection message(S45).
|
