%0 Journal Article
%T Proactive Defense Against HTTP Flood Attacks Based on Watching Web Log<br>基于日志监视主动防御 HTTP 泛洪攻击
%A YUAN Zhi
%A <br>袁志
%J 计算机系统应用
%D 2012
%I 
%X HTTP flood attacks mimicking normal access behavior are difficult to discovered,it consumes web server＇s resources and brings hidden danger on information security,a method of proactive defense against HTTP floods is provided.Rewrite URL to record CookieId and SessionId of HTTP requests into Web log;analysis Web log at regular time,identify user according CookieId and SessionId,indentify puppet computers using request time characteristic;process HTTP requests in advance to keep out the requests from the puppet computers.This method is low cost and easy to implement,practice proved its validity.
%K distributed denial of service
%K HTTP flood
%K website security
%K Web log analysis
%K proactive defense<br>分布式拒绝服务攻击
%K HTTP泛洪
%K 网站安全
%K Web日志分析
%K 主动防御
%U http://www.alljournals.cn/get_abstract_url.aspx?pcid=5B3AB970F71A803DEACDC0559115BFCF0A068CD97DD29835&cid=8240383F08CE46C8B05036380D75B607&jid=D4F6864C950C88FFCE5B6C948A639E39&aid=57C6AD9B0ADA0537C1D34ACFB48AB6DE&yid=99E9153A83D4CB11&vid=659D3B06EBF534A7&iid=94C357A881DFC066&sid=3A0155B37D8FF829&eid=AC1578C6BB9EBDEF&journal_id=1003-3254&journal_name=计算机系统应用&referenced_num=0&reference_num=5