LNZC2019-0155
42
LNZC2019-0155
1.
2.
3.
4.
:
13.3234 2019711 09:30 101206134781964985//67 5 , 1
,8,1,910111.157024679242. 024-23447785 024-234477501250%13 6% 14: :
101 : :1570246792415100A509 2344773323447956
024-23447773024-23447726 024-23447772
DDOS
13300000.003300000.0030000.001213:003.4061 820 010 400 315
67
11-121-231-3
1)22434534
15326374
14
1.
2.,
1
2
LNZC2019-0155
3
1.1
1.2
1.3
1.4
1.43
2.1
2.2
2.3
( )
4-1
4-2
____________ _____________
4-3
3
3(www.creditchina.gov.cn/)www.ccgp.gov.cn
()
5
)
90
51013
1
2
3
4
5
6
2
( )
6
/
1
2
3
4
5
6
( )
61
62
7
1/30/10190%10%[2017]60333327*24125*82 1
52
3
1-1111)2)16G1T4100/1000M. 21) SYSLOGSNMP/SNMP
TRAPICMPARPJDBC/ODBCTELNETSSH/HTTPHTTPJMXSOAPAPIWMIWebServiceAgent2)
IT3)
/IPIP4)CPU31)241112)24111TOP10TOP1041)2)51)IPIPIPIPIP2)61)2)3)IPMACIPMAC71)2)IPIP3)81)/IP2)3)91)1241111TOPNTOPNTOPN2)101)2)111)111121)2)/IP131)2)EXCELPDFRTFCSV141)2)CVEBugtraqCNVDCVEBugtraq141)120,
25000/ EAL3+1-221,14*1T SATA1G21IP23456731241251
IDM23MysqlOracleSqlServer4officetxtpdfzip6127: 12341AB10AB102A ! B
! CA $%B^&*(C81wordexcelpowerpointwpspdf2Cjava3GD9
1HTTP2SMTP3FTP101112IP173031212ID13121512341-3()1111221CPU
142.6Ghz256G24622164G SSD2480G
SSD64TSATA1202ARMCPU1.6Ghz1G4GUSB61VGA11312PC34//5CMMI51120VDI22123DHCPDHCPIP4USB51-441.CPUIntel
E3 3.0GHz32G21T SATA128G
SSD83bypass2.103.SQL12000/40SQL4.OracleRACSQL
ServerMysqlDB2DM6HiveInformixSybasePostgreSQLmariaDKingbase5.
1.2.103.SQLIPMACSQL4.5.SQLSQL6.,SQLSQL7.B/S8.SQL9.DBA\SYSDBA\Schema
User\any10.11.12.13.14.SQL15.PDFEXCEL16.1-5DDOS 1 DDOS1.
>=4Gbps400W202. 88234.5. 1.2.3.1.SYN FloodACK FloodICMP
FloodICMP FragmentUDP FloodUDP FragmentFIN/RST FloodTCP MisuseTCP
Connection FloodTCP FragmentHTTP FloodHTTP Slow AttackHTTPS
FloodSIP FloodDNS Query FloodDNS Reply FloodDNS AmplificationSSDP
AmplificationNTP AmplificationChargen AmplificationSNMP
Amplification2.CS3.DNSDNSDNS44.HTTP Get Flood9HTTP5.HTTP POST
Flood6.SSLHTTPS7.8.urlCC9.10.11.IP/IP/TOSTTL/HopLimitUDPICMPICMPv6TCPTCPpayload12.ACLTCPUDPGeoIP13.URL14.UDPpayload15.UDPIP+IPIP+IP+IP16.TCPIP17.18.SIP19.IPIP120.webIP21.1.BGPOSPF2.GREPBRMPLS
LSPMPLS VPN3.portchannel1.2.Web3.Web4.Web5.httpsSSH 6.7.8.9.10.
snmpsyslogAPI11. syslog12. 13. 14. 15. web16. 17. IP18.
Radius19.20.IPIPIP21.22.APPCPU23. CPUCPUsyslogsnmp24. web1.2.1-6
DDOS1DDOS1. 3T500G2.SYN FloodACK FloodICMP FloodUDP FloodNTP Flood
SSDP FloodDNS FloodHTTP
Flood3.TCP/UDP/HTTP/HTTPSDDoS4.CCIP100QPSIPjsip+cookieCC5.
DDoSCCCCDDoS6.WAFwebXSSSQLweb7. DDoS:5510GD18.1.2.3. ip
1
2
3
4
39
8
/ / /
1 (Cmin/C)*CminC30()29112988640875207PPTPPT105642061AAA112113
114ITSS115GB/T 19001-2016/ISO 90012015116GB/T 22080-2016/ISO/IEC
27001:20131 17 ITISO/IEC200001111.12. 1 22ITSS 1 13PMP 1
130620-29410-19210661331 (/) 3%2 (/) 3%01 (/) 3%2 (/) 3%0
-100++100
1.
2.
3.
1
1
1.
2.
2.1
2.2
2.3
2.4
2.5
2.6
3.
3.1(www.creditchina.gov.cn/)www.ccgp.gov.cn
3.2
3.3
3.3.1
3.3.2
3.3.3
4.
5.
6.
7.
7.1
7.2
7.3
8.
8.1
8.1.1
8.1.2
8.1.3
8.1.4
8.2
8.2.1
8.2.2
8.2.3
8.2.4
8.3
9.
9.1
9.2
9.3
10.
10.1
10.2
10.3
11.
12.
13.
13.1
13.2
13.3
13.4
13.5
13.6
14.
14.1
14.2
14.3
14.4
14.5
14.6
15.
15.1
15.2
16.
16.1
16.2
16.3
17.
17.1
17.213:00
17.3
17.4
17.520
17.6
17.6.1
17.6.2
17.7
17.7.1
17.7.2
17.7.3
18.
18.190
18.2
19.
19.1
19.2
19.3
19.4
20.
20.1
20.2
20.3
20.4
21.
22.
23.
23.1
23.2
23.3
23.4
23.5
24.
24.1
24.2
24.3
24.4
24.4.1
24.4.2
24.4.3
24.4.4
25.
25.1
25.2
25.3
26.
26.13
26.2
26.2.1
26.2.2
26.2.3 26.4
26.2.4
26.2.5
26.3 .1
26.3.1.1
26.3. 1.2
26.3. 1.3
26.3. 1.4
26.3. 1.5;
26.3. 1.6
26.3.2
26.3.2.1
26.3.2.2
26.3.2.3
26.3.2.4
26.3.2.5
26.3.2.6
26.3.2.7
26.4
26.4.1
26.4.2
26.4.3
26.4.4
27.
28.
28.1
28.1.1
28.1.2F1A1F2A2FnAnF1F2FnA1A2An(A1A2An1)
28.1.3
28.1.4
28.2
28.2.1
28.2.2
28.3
29.
29.1
29.2
29.3
30.
30.1
30.2
31.
31.1
31.2
32.
32.1
32.1.1
32.1.2
32.1.3
32.2333
32.
33
33.
33.1
33.2
33.3
34.
34.1
34.1.1
34.1.2
34.1.3
34.2333
35.
35.1
35.2
35.3
36.
36.130
36.2
36.3
36.4
36.5,10%
37
37.1
37.2
37.3
38.
38.1
38.2
123
38.3(94)38.4
38.5
38.6
39.
40.
2
3
1.
1.1
1.2
1.3
1.4
1.5
1.6
1.7
1.8
1.9
1.10
1.11
1.12
1.13
1.14
1.15
2.
2.1
2.2
3.
4.
4.1
4.2
5.
5.1
5.2[2017]603
5.3
6.
6.1
6.2
6.3
7.
7.1
7.2
8.
8.1
8.2
8.2.1
8.2.2
8.2.3,
8.2.4
8.3
9.
9.1
9.2
10.
10.19
10.2
10.3
11.
11.1
11.2
11.2.1
11.2.2
11.2.3
11.2.4Web
11.2.5
11.2.6
11.2.7
11.2.8
11.2.9
12.
12.11010
12.1.1
12.1.2
12.1.3
12.1.4
12.1.5
12.210
12.3
12.3.11%10%
12.3.21010%
12.4
13.
13.1
13.2
13.3
14.
14.1
14.210
14.3
14.4
15.
15.1
15.1.1
15.1.2
15.2
15.3
16.
()
17.
,
18.
19.
19.1
19.2
20.
20.1
20.2
20.3
20.4
20.5
20.6
4
() ()
1.
2.
3.
4.
5.
6.
()
: ():
(): ():
