Rabin & Berdo, P.C.
Apparatus and method for detecting distributed reflection denial of service attack
Disclosed herein are an apparatus and method for detecting a Distributed Reflection Denial of Service (DRDoS) attack. The DRDoS attack detection apparatus includes a network flow data reception unit for receiving network flow data from network equipment, a session type determination unit for determining a session type of the received network flow data, a host type determination unit for determining a type of host corresponding to the network flow data based on the session type, an attack method determination unit for determining an attack method corresponding to the network flow data, a protocol identification unit for identifying a protocol of the network flow data, and an attack detection unit for detecting a DRDoS attack based on the session type, the host type, the attack method, and the protocol.
ELECTRONICS AND TELECOMMUNICATIONS RESEARCH INSTITUTE
H H H H H H H
H04L H04L H04L H04L H04L H04L H04L
inventional additional additional additional inventional inventional inventional
Ik-Kyun Jung-Tae
Kim Kim