关键词: 生物免疫原理, DDoS攻击, 特征提取, DDoS检测算法, 信息熵

Abstract: With the continuous development of social informatization construction, Internet has become the basic platform for many industries, DDoS attacks have been a serious threat to network security. For the serious threat, a detection method is proposed to study the DDoS attacks using the biological immune principle. In this method, information entropy, service rate and the rate of change parameters are used to establish the DDoS feature library. On the basis of the library, DDoS detection algorithm is proposed to achieve the recognition and filteration of DDoS attacks. Experimental results show that the method is feasible and efficient, provides an important evidence for DDoS attack prevention and detection.

Key words: biological immune principle, DDoS attacks, feature extraction, DDoS detection algorithm, information entropy