分布式拒絕服務(wù)（DDoS）攻擊是當(dāng)前影響因特網(wǎng)正常工作的一個(gè)嚴(yán)重的問(wèn)題，出現(xiàn)的攻擊將會(huì)阻止合法的用戶(hù)使用其所需要的資源。本研究將借助于SSFNet(Scalable Simulation Framework)模擬軟件構(gòu)建相應(yīng)的網(wǎng)絡(luò)環(huán)境，并模擬了TCP SYN 溢出攻擊的全過(guò)程。通過(guò)調(diào)整相關(guān)的實(shí)驗(yàn)參數(shù)設(shè)置，給出了在不同攻擊強(qiáng)度下被攻擊子網(wǎng)的通訊流量圖。通過(guò)實(shí)驗(yàn)可以看出， DDoS 攻擊的目的在于耗費(fèi)被攻擊目標(biāo)機(jī)器的資源而使其拒絕提供正常服務(wù)，而不是消耗大量的網(wǎng)絡(luò)帶寬。論文還進(jìn)一步說(shuō)明了從攻擊開(kāi)始到目標(biāo)機(jī)器癱瘓的時(shí)間取決于攻擊的強(qiáng)度，即攻擊者所控制的發(fā)起攻擊的機(jī)器數(shù)量以及發(fā)送攻擊包的數(shù)量。
關(guān)鍵詞: 分布式拒絕服務(wù)（DDoS）；SSFNet；TCP SYN
Abstract: The Distributed Denial of Services (DDoS) Attack is a serious issue on current Internet, and frustrates legal users to use some resources they needed. This paper uses SSFNet tools to build network environments, and simulates attack process of TCP SYN. The different network flow graphs are given according to different attack intensity by changing parameter settings in the paper. The target attached by DDoS will consume its resources and provide no services. The period from starting attack to crash of the computer is based on the intensity of attacks which are related to the number of attackers and the number of attack packets.
Key Words: DDoS, SSFNet, TCP SYN