Method And Device For Defending Against Denial Of Service Attacks

摘要

One example method for defending against denial of service (DoS) attacks is applied to a terminal device including a trusted execution environment (TEE) and a rich execution environment (REE) that are isolated from each other. The method includes obtaining an access request initiated to a service or an interface by a client application (CA) running in the REE, where the access request is used to request a service or a resource, transferring the access request to the TEE, and determining, by the TEE according to a control policy determined based on an access behavior model, whether to grant the access request. The access behavior model is trained by using a statistical method or a machine learning algorithm, with an access behavior dataset of accessing the service or the interface by a plurality of normal CAs.