一種分布式拒絕服務DDoS攻擊檢測方法及相關設備技術

本發明專利技術實施例公開了一種分布式拒絕服務DDoS攻擊檢測方法及相關設備，應用于軟件定義網絡SDN，所述SDN包括控制器和至少一個邊界交換機。其中，所述方法包括：監聽預設的第一窗口內的第一請求消息，并計算所述SDN中的目標設備針對所述第一請求消息的當前請求速率，所述第一請求消息為所述目標設備對應的邊界交換機發送給所述控制器的需要所述控制器處理的請求數據流；以所述當前請求速率為依據，判斷所述目標設備是否處于異常狀態；若所述目標設備處于異常狀態，則查詢所述目標設備對應的流表匹配信息；以所述流表匹配信息為依據，確定所述目標設備是否受到DDoS攻擊。采用本發明專利技術，能夠提升針對SDN的DDoS攻擊檢測的準確性。

A distributed denial of service DDoS attack detection method and related equipment

An embodiment of the invention discloses a distributed denial of service DDoS attack detection method and related equipment, which is applied to a software defined network SDN, which includes a controller and at least one boundary switch. The method includes: listening to the first request message in the first window of the preset, and calculating the current request rate of the target device in the SDN for the first request message, the first request message is processed by the controller that the boundary switch of the target device corresponding to the controller needs. The request data stream is asked to determine whether the target device is in an abnormal state on the basis of the current request rate, and if the target device is in an abnormal state, the flow table matching information corresponding to the target device is queried, and the target device is determined by the DDoS attack on the basis of the flow table matching information. By adopting the invention, the accuracy of DDoS attack detection for SDN can be enhanced.

【技術實現步驟摘要】
【國外來華專利技術】PCT國內申請，說明書已公開。

【技術保護點】
PCT國內申請，權利要求書已公開。

【技術特征摘要】
【國外來華專利技術】PCT國內申請，...

【專利技術屬性】
技術研發人員：徐通，鄭濤，董平，孫嘉楠，
申請(專利權)人：華為技術有限公司，
類型：發明
國別省市：廣東,44