Abstract:Distributed Denial of Service (DDoS) flooding attacks are one of the biggest concerns for security professionals. DDoS flooding attacks are typically explicit attempts to disrupt legitimate users' access to services. Attackers usually gain access to a large number of computers by exploiting their vulnerabilities to set up attack armies (i.e., Botnets). Once an attack army has been set up, an attacker can invoke a coordinated, large-scale attack against one or more targets. Developing a comprehensive defense mechanism against identified and anticipated DDoS flooding attacks is a desired goal of the intrusion detection and prevention research community. However, the development of such a mechanism requires a comprehensive understanding of the problem and the techniques that have been used thus far in preventing, detecting, and responding to various DDoS flooding attacks. In this paper, we explore the scope of the DDoS flooding attack problem and attempts to combat it. We categorize the DDoS flooding attacks and classify existing countermeasures based on where and when they prevent, detect, and respond to the DDoS flooding attacks. Moreover, we highlight the need for a comprehensive distributed and collaborative defense approach. Our primary intention for this work is to stimulate the research community into developing creative, effective, efficient, and comprehensive prevention, detection, and response mechanisms that address the DDoS flooding problem before, during and after an actual attack.

Defense study and implementation mechanism of distributed denial of service attack

The Principle and Defending of DDoS Attack

Technical Analysis and Defendable Policy of Distributed Denial of Service Attack

Research on Distributed Denial-of-service Attacks:a Survey

Defense Technology of DDoS Attacks

Formalized Description of Distributed Denial of Service Attack

Research on Safeguard Techniques against DoS and DDoS Attacks

Analysis、detection and Protection Technology of DDOS Attack

A Defense Mechanism for Distributed Denial of Service Attack in Software-Defined Networks

DDoS Attack Principle and Defense Methods are Discussed

Research on Defense System Against DDoS Attacks

Research on P2P-based DDoS Attacks and Their Defense Mechanism

Analysis and Defense for Application Layer DDoS Attacks in the Novel Network Environment

A Novel Mechanism For Detection And Prevention Of Distributed Denial Of Service Attacks

A Ddos Attack Defending Scheme Based on Network Processor

Defending Against Denial of Service Attacks

Distributed Denial-of-Service (DDoS) Attacks and Defense Mechanisms in Various Web-Enabled Computing Platforms: Issues, Challenges, and Future Research Directions

Survey of Detection on DDoS Attack

Integrated Scheme for Fighting Against DDoS Attacks

A Survey of Defense Mechanisms Against Distributed Denial of Service (DDoS) Flooding Attacks

A DDOS Defence Scheme Based on Two-Stage Traffic Flow Control.