FLOODING ATTACK DETECTION CONTROL METHOD AND APPARATUS THEREOF

摘要

An apparatus and a method for blocking a harmful traffic are disclosed. According to an embodiment of the present invention, a method for blocking a harmful traffic, when the amount of traffic in a DNS query that is sent from a client to a DNS server exceeds the preset amount of traffic, generates a CNAME including a predetermined hash value in the DNS query and transmits the generated CNAME to the client and determines and blocks, when the DNS query for the CNAME is transmitted from the client, the traffic as a harmful traffic when the integrity of the hash value is not verified by checking whether the hash value of the transmitted DNS query is integrity.;COPYRIGHT KIPO 2019