DDoS attacks and defense mechanisms: classification and state-of-the-art

Protection from Application Layer DDoS Attacks for Popular Websites

“…The conventional security technologies such as firewalls [8] Intrusion Detection Systems (IDSs) [9] and access control lists in routers are unable to defend networks from App-DDoS attacks. The main reason is that, it is almost impossible to differentiate between legitimate and attack packets since the potency of flooding Distributed Denial of Service attacks depends only on the volume of attack traffic and does not depend upon the exploitation of software bugs or protocol vulnerabilities.…”

HoneyMesh: Preventing Distributed Denial of Service Attacks using Virtualized Honeypots

“…A denial of service (DoS) attack is an attempt to make a service, usually one offered over internet, unavailable to its legitimate users [1][2][3]. This can result in either temporary interruption in service by means of overwhelming the server with several requests or a permanent one that causes the server to crash.…”

“…Such attacks can result in long term outages and can severely damage the reputation of an enterprise resulting in a decline of user trust. Thus it has become imperative to protect vulnerable servers against such attacks [1][2][3][4].…”

“…Of all the attacks that hinder the availability of service, a denial of service attack poses maximum threat to an organization since it has direct effect on the service availability to a consumer. A denial of service attack results in a temporary or long-term nonavailability of a service to its intended users by the way of either crashing a service resulting in complete non-availability or by flooding a server with fraudulent requests thereby slowing down the delivery of service to real users [1]. Honeypot can be used as an intrusion detection mechanism that can replicate some or all actions of a server and effectively monitor potential attackers thereby enabling the server admins to detect and prevent potential denial of service attacks to ensure a reliable and continuous service to their intended users.…”

Network Attack Detection at Flow Level

“…In connection with these trends, the question of computer networks security is starkly raised. Attackers have developed and actively use many types of network intrusion [1,2,3,4], most of which can be prevented by standard methods of protection.…”