針對應用層分布式拒絕服務（application layer DDoS,簡稱App-DDoS）攻擊的特點，
結(jié)合流量控制技術(shù)，應用可信度的概念和分布式處理的思想，提出了基于可信度的App-DDoS攻擊的分布式流量控制模型。該模型以正常用戶的服務請求數(shù)據(jù)分布規(guī)律作為計算可信度的依據(jù)，利用多層次結(jié)構(gòu)，在網(wǎng)絡拓撲的不同節(jié)點上實現(xiàn)流量控制，從而實現(xiàn)了在防御App-DDoS 攻擊的同時，降低了對網(wǎng)絡性能的影響。
關鍵字：應用層分布式拒絕服務；流量控制；可信度；服務請求數(shù)據(jù)分布規(guī)律

Distributed flow control model of the App - DDoS attacks based on the credibility LONG Shi-gong [1], ZHAO Meng-long [2] (Institute of Computer Software and Theory, Guizhou University, Guizhou Guiyang, 550025)Abstract: The application layer distributed denial of service (application layer DDoS, referred to as App-DDoS) attack characteristics, combined with flow control technology, the applications of credibility and the thought of distributed processing, made Distributed flow control model of the App-DDoS attacks based on the credibility. The model calculated the credibility with the normal user's service request for data distribution and achieve flow control in different nodes of the topology network with multi-level structure,thus not only achieve the defense against the App-DDoS attack at the same time, but also reduced the impact on performance of network.
Keywords: application-level distributed denial of service ； traffic control ；
credibility； service request for data distribution services