Protecting Web Services from Distributed Denial of Service Attacks

分布式拒绝服务(DDoS)攻击给互联网上的Web服务带来了巨大的威胁。DDoS攻击在全球范围内导致大量Web服务瘫痪，造成巨大的业务损失。迫切需要有效的方法来击败DDoS攻击。大多数现有的DDoS防御系统只针对受害者网络进行保护，并且没有完全集成。在这个项目中，我们提出了一种新的防御系统来保护Web服务免受DDoS攻击。我们的系统是首批在受害者端和攻击源端混合部署，并集成了入侵监控、流量控制和回溯能力的系统之一，从而达到了对其他机制更好的控制效果。

Distributed denial-of-service (DDoS) attacks bring a tremendous threat to web services on the Internet. Large amount of web services were pulled down worldwide by the DDoS attacks, with huge losses in business. Effective approaches to defeat DDoS attacks are desperately demanded. Most existing DDoS defense systems aim to only protect the victim network and are not fully integrated. In this project we propose a novel defense system to protect web services from DDoS attacks. Our system is one of the first systems that have a mixture deployment in both victim end and attack source end, and integrated capabilities of intrusion surveillance, traffic control, and traceback, thus achieve better control results over other mechanisms.