A Resilient Response Method of DDoS Attack Based on TCP Proxy

The widespread distributed denial of dervice attack (DDoS) poses a major threat to network security. The emergence and vigorous development of NFV technology provides us with a new idea to deal with DDoS attack. In view of the weak defense ability of SYN flood attack response method in NFV, this paper proposes a resilient response method of DDoS attack based on TCP proxy. First, the distributed deployment method of traffic detection filtering device in NFV environment is determined. Second, a DDoS attack response mechanism based on TCP proxy is designed to realize the filtering of malicious traffic. Finally, the resource demand expansion of malicious traffic filtering in NFV is studied to realize the rapid expansion of resources and improve the defense ability to DDoS attacks. The method proposed in this paper can effectively block SYN flood attacks, realize the flexible deployment and resilient expansion of security services.