Abstract: DDoS attack is a widespread use of attack which difficult to defend, based on autonomous system router traffic authentication technologies can effectively resist such attacks. We proposed to improve the autonomous system of two certification systems according to some of these technology shortcomings, to meet the data transmission efficiency and security requirements. Through the introduction of state of the current data transfer rate and life cycle of the relationship to expand the scope of its defensive attack, such as flood DDoS attacks, semi-open connections DDoS attacks.