Abstract:Distributed Denial of Service (DDoS) attacks exhaust victim's bandwidth or services. Traditional architecture of Internet is vulnerable to DDoS attacks and an ongoing cycle of attack & defense is observed. In this paper, different types and techniques of DDoS attacks and their countermeasures are reviewed. The significance of this paper is the coverage of many aspects of countering DDoS attacks including new research on the topic. We survey different papers describing methods of defense against DDoS attacks based on entropy variations, traffic anomaly parameters, neural networks, device level defense, botnet flux identifications and application layer DDoS defense. We also discuss some traditional methods of defense such as traceback and packet filtering techniques so that readers can identify major differences between traditional and current techniques of defense against DDoS attacks. Before the discussion on countermeasures, we mention different attack types under DDoS with traditional and advanced schemes while some information on DDoS trends in the year 2012 Quarter-1 is also provided. We identify that application layer DDoS attacks possess the ability to produce greater impact on the victim as they are driven by legitimate-like traffic making it quite difficult to identify and distinguish from legitimate requests. The need of improved defense against such attacks is therefore more demanding in research. The study conducted in this paper can be helpful for readers and researchers to recognize better techniques of defense in current times against DDoS attacks and contribute with more research on the topic in the light of future challenges identified in this paper.

Research on DOS Attack and Defense of SIP

Design and Implementation of Distributed VoIP Architecture Based on SIP Protocol

Research on Distributed Denial-of-service Attacks:a Survey

Research on DDoS Attacks in IPv6.

A Comprehensive Survey on Ddos Defense Systems: New Trends and Challenges

Study on Attacking and Defending Techniques in IPv6 Networks

Research on distributed denial-of-service attacks in MANET:a survey

Survey on New Solutions Against Distributed Denial of Service Attacks

Research on an Effective Approach Against DDoS Attacks

A Comprehensive Survey of Distributed Denial of Service Detection and Mitigation Technologies in Software-Defined Network

DDoSMiner: an Automated Framework for DDoS Attack Characterization and Vulnerability Mining.

A Method Based on AMHI for DDoS Attacks Detection and Defense

A systematic review on distributed denial of service attack defense mechanisms in programmable networks

DDoS Attack Defense in Big Data-oriented Urban Rail Transit Safety Evaluation System

Towards Risk Evaluation of Denial-Of-Service Vulnerabilities in Security Protocols

Session Initiation Protocol and Application:Status, Problem and Prospect

Survey of Attacks and Countermeasures for SDN

DoSDefender: A Kernel-Mode TCP DoS Prevention in Software-Defined Networking

Defending against Distributed Denial of Service Attacks: Issues and Challenges

Overview of DDoS Attack Detection in Software-Defined Networks

DDoS Attack and Defense: Review of Some Traditional and Current Techniques