Abstract:In the past ten years, the source of DDoS has migrated to botnets composed of IoT devices. The scale of DDoS attacks increases dramatically with the number of IoT devices.New variants of DDoS attacks using different system vulnerabilities emerge in an endless stream. In response to this situation, researchers have made significant contributions to the field of DDoS defense by applying modern programmable network technology and network-level resource scheduling management technology. However, the existing review articles need more research on these technologies. After investigating the development trend of DDoS attacks in recent years and the new challenges caused by them, this paper classifies the new technologies that have emerged in the field of DDoS defense in the past ten years. Among them, the collaboration between domains and inter-domain resource scheduling is one of the critical challenges in designing a large-scale distributed DDoS cooperative defense system. In addition, modern programmable network technology has dramatically expanded network systems' functional diversity and deployment flexibility. We will discuss building a defense system based on programmable networks and focus on SOTA defense solutions based on programmable switches. Finally, developing DDoS defense mechanisms with broad-spectrum detection capabilities, robustness against adversarial attacks, and cost-effective and collaborative DDoS defense mechanisms for establishing the Internet are future research directions in network security.

Research on intrusion tolerance parameters facing DDoS attacks

Detection and Response of Low-Rate TCP-targeted Denial of Service Attacks

Optimal control of DDoS defense with multi-resource max-min fairness

TPDD: A Two-Phase DDoS Detection System in Software-Defined Networking

Research on an Effective Approach Against DDoS Attacks

On the Performance Evaluation of Congestion Control Algorithms Against DDoS Attacks.

DDoSMiner: an Automated Framework for DDoS Attack Characterization and Vulnerability Mining.

A Method Based on AMHI for DDoS Attacks Detection and Defense

Defend Against Application-Layer Distributed Denial-of-Service Attacks Based on Session Suspicion Probability Model

Research on Distributed Denial-of-service Attacks:a Survey

DDoS Attack Defense in Big Data-oriented Urban Rail Transit Safety Evaluation System

NIS04-5: Defending Against Meek DDoS Attacks by IP Traceback-based Rate Limiting

RAM: A Resource-Aware DDoS Attack Mitigation Framework in Clouds

Defending Against Denial of Service Attacks

Method Research for Defending Against Distributed Denial-of-Service Attacks Based on Dynamic Game Theory

Research on DDoS Attacks in IPv6.

Analysis And Comparison Of The Network Security Protocol With Dos/Ddos Attack Resistance Performance

A Comprehensive Survey on Ddos Defense Systems: New Trends and Challenges

A novel rate limit algorithm against meek DDoS attacks

An Adaptive Defending Mechanism Against Distributed Denial-of-Service (DDoS) Attacks

Characterizing the Impacts of Application Layer DDoS Attacks