An effective model for defense against distributed denial of service

Abstract EN

Today Distributed Denial of Service (DDoS) attacks are causing major problems to conduct online business over the Internet.

Recently several schemes have been proposed on how to prevent some of these attacks, but they suffer from a range of problems, some of them being impractical and others not being effective against these attacks.

The aim of this work is to present an infrastructure model for integrating different prevention and detection tools.

Here intrusion response mechanism consists of analysis of event logs, IP trace back, and traffic pattern analysis.

Also, this work presents within the proposed model a defense mechanism against attacks.

Defense mechanism categories the network according to the location into victim network, intermediate network, and source of attack network.

Hence I believe that the model proposed in this paper seems to be a promising model to defense against distributed denial of service attacks.