DDoS attack and defense is regarded as a multistage signaling game with observable actions. Its extensive form is given out, and its perfect bayesian nash equilibrium is solved. The current problems encountered by DDoS attack defense are discussed. Theoretical analysis proves the feasibility and effectiveness of the service hopping strategy. This paper draws a conclusion that adding service hopping strategy is superior to a pure filtering strategy, also provides beneficial reference on DDoS attack prevention.