Protecting Web Services from Distributed Denial of Service Attacks

分布式拒绝服务（DDoS）攻击给Internet上的web服务带来了巨大的威胁。全球范围内大量网络服务因DDoS攻击而瘫痪，造成了巨大的商业损失。迫切需要有效的方法来挫败DDoS攻击。现有的DDoS防御系统大多以保护受害网络为目标，没有做到充分集成。在这个项目中，我们提出了一种新的防御系统来保护web服务免受DDoS攻击。我们的系统是第一个在受害者端和攻击源端混合部署的系统，集成了入侵监控、流量控制和溯源功能，达到了比其他机制更好的控制效果。

Distributed denial-of-service (DDoS) attacks bring a tremendous threat to web services on the Internet. Large amount of web services were pulled down worldwide by the DDoS attacks, with huge losses in business. Effective approaches to defeat DDoS attacks are desperately demanded. Most existing DDoS defense systems aim to only protect the victim network and are not fully integrated. In this project we propose a novel defense system to protect web services from DDoS attacks. Our system is one of the first systems that have a mixture deployment in both victim end and attack source end, and integrated capabilities of intrusion surveillance, traffic control, and traceback, thus achieve better control results over other mechanisms.