Abstract:

With the increasing severity of cybersecurity threats, especially the Distributed Denial of Service (DDoS) attacks, pose significant challenges to network stability and business continuity. This paper proposed a novel distributed large-scale traffic cleaning solution aimed at effectively combating DDoS attacks. The scheme utilized real-time port traffic mirroring technology and deep packet detection technology to rapidly identify and cleanse malicious traffic. Furthermore, by directly cleansing attack traffic on network edge devices, it preventd bandwidth waste and network congestion. Experiments were conducted by simulating normal and malicious traffic and applying the proposed scheme for traffic monitoring and cleansing. The results demonstrate that the scheme can significantly enhance the interception and cleansing efficiency of DDoS attack traffic, holding substantial practical application value and theoretical significance.

Key words: cybersecurity, distributed denial of service attack, traffic cleaning, deep packet detection