关键词: 云环境, Web服务, 分布式拒绝服务, 攻击检测, 云计算

Abstract: Web service technology is of the advantages of low coupling degree, cross platform and language independence, so it has been widely used on the network and electronic commerce. Aiming at the problem that the application layer of Web services in cloud computing environment is vulnerable to be attacked, a defense system is proposed to detect the distributed denial of service (DDoS) attack in XML and HTTP layer. First, extracting characteristic values of the data set from belonging to a particular Simple Object Access Protocol (SOAP) normal operation, the corresponding Gaussian request model was constructed; after setting some of the attributes of network services for Web Services Description Language (WSDL),  attack was achieved initial filter; finally, the service request HTTP headers and XML content were examined and compared with the model data, and the further attack detection was implemented. Experimental results show that the system can effectively prevent many DDoS attacks, and consume less response time.

Key words: cloud environment, Web services, distributed denial of service, attack detection, cloud computing