随着计算机网络的飞速发展,网络安全已经成为全社会关心的重要问题。本文通过对网络安全及分布式拒绝服务攻击进行研究,提出了一种新的基于流量的SYNFlooding攻击定位及防御算法。该算法所依据的体系结构是一个典型的分布式系统,各Agent分别部署在网络的不同节点上,整个系统的正常运行依赖于各Agent间的相互协调和通信。本文用聚合Petri网作为工具,对这种新的基于流量地SYNFlooding攻击定位及防御算法进行了具体分析和详细描述。 With the rapid development of computer networks, network security has become an important issue of concern to the whole society. In this paper, we study the network security and distributed denial of service attacks, and propose a new traffic-based SYNFlooding attack location and defense algorithm. The architecture on which the algorithm is based is a typical distributed system. Each agent is deployed on different nodes in the network. The normal operation of the whole system depends on the coordination and communication between the agents. In this paper, the use of aggregate Petri nets as a tool for this new traffic-based SYNFlooding attack location and defense algorithms were analyzed and described in detail.