低速率TCP拒绝服务攻击的小波检测方法

摘要

利用提升小波方法对受到LDoS攻击的TCP业务流采样样本的自相似性进行分析,NS2模拟实验结果表明,在攻击期间的混合流样本与正常流样本的Hurst指数有较大的差别,由此提出了一个基于提升小波的低速率拒绝服务攻击早期检测方法.%The TCP traffic flow attacked by LDoS is analyzed based on the lifting scheme for the wavelet transform.The experimental results on NS2 indicate that the Hurst parameter values between the legal TCP flow samples and the mixed flow samples during attacking period vary greatly,the method of early detecting LDoS attack is proposed.