클라우드 환경에서의 DDoS 공격 방지를 위한 엔트로피 기반의 이상 탐지 및 IP 분류 시스템

Abstract

The IT environment has gradually moved to the cloud and web terminals where 80% of the network attacks are aimed at web applications. Relying only on the traditional firewall and terminal security software no longer protects the enterprise from most of the security threats. Cloud computing provides services to enterprises in the form of broadband network and web. Its own strong reliability, high scalability, virtualization technology, low price and other characteristics provide a guarantee for the safety of the enterprise. Cloud computing tandem IOT and big data has become a new trend in the future application development, it is a key factor in guiding cloud computing. This paper describes the cloud computing technology in data security aspects of anti DDoS attack method. Although the safety degree of the cloud environment is far higher than the traditional security system, but malicious intrusions are common. Intruder steal the legal address and use service resources maliciously to attack the cloud computing environment. Based on the combination of entropy anomaly detection and IP classification can determine the legality of the users and integrate legitimate users. This approach can ensure the relative safety of the cloud computing environment and enhance the service efficiency of the anti DDoS attack.