Abstract:In the past ten years, the source of DDoS has migrated to botnets composed of IoT devices. The scale of DDoS attacks increases dramatically with the number of IoT devices.New variants of DDoS attacks using different system vulnerabilities emerge in an endless stream. In response to this situation, researchers have made significant contributions to the field of DDoS defense by applying modern programmable network technology and network-level resource scheduling management technology. However, the existing review articles need more research on these technologies. After investigating the development trend of DDoS attacks in recent years and the new challenges caused by them, this paper classifies the new technologies that have emerged in the field of DDoS defense in the past ten years. Among them, the collaboration between domains and inter-domain resource scheduling is one of the critical challenges in designing a large-scale distributed DDoS cooperative defense system. In addition, modern programmable network technology has dramatically expanded network systems' functional diversity and deployment flexibility. We will discuss building a defense system based on programmable networks and focus on SOTA defense solutions based on programmable switches. Finally, developing DDoS defense mechanisms with broad-spectrum detection capabilities, robustness against adversarial attacks, and cost-effective and collaborative DDoS defense mechanisms for establishing the Internet are future research directions in network security.

The Technical Analysis and Security Countermeasure of DoS-based Network Attacks

Detection and Response of Low-Rate TCP-targeted Denial of Service Attacks

Analysis、detection and Protection Technology of DDOS Attack

Research on Safeguard Techniques against DoS and DDoS Attacks

Defense Technology of DDoS Attacks

Research on Network Attacks and Security Countermeasures

Defending Against Denial of Service Attacks

Research on Distributed Denial-of-service Attacks:a Survey

Technical Analysis and Defendable Policy of Distributed Denial of Service Attack

A DoS Protection Method in Linux Environment

DoS Attacks and Countermeasures on Network Devices

Survey of Network-Based Defense Mechanisms Countering the DoS and DDoS Problems

Analysis and Defense for Application Layer DDoS Attacks in the Novel Network Environment

A comparative study on flood DoS and low-rate DoS attacks

Design and Implementation of Linux-gateway-based DoS/DDoS Protect System

A Comprehensive Survey on Ddos Defense Systems: New Trends and Challenges

The Principle and Defending of DDoS Attack

Defense study and implementation mechanism of distributed denial of service attack

A Simple DDoS Defense Method Based SDN

Analysis And Comparison Of The Network Security Protocol With Dos/Ddos Attack Resistance Performance

A novel DoS detection mechanism