Detection & Mitigation of DDOS Attack

Abstract

The DDoS (Distributed Denial of Service) attack is a type of Cyberattack in which multiple attackers aim to attack different network resources like a server or a website. Although many statistical methods have already been designed for DDoS attack detection, designing a real-time detector with low computational overhead is still one of the main concerns. The already existing datasets are highly important and can be used for constructing and checking new solutions. It is the most dangerous attack against IPv6 networks today. The attack uses Internet Control Message Protocol version 6 (ICMPv6) messages. DDoS attack can be detected in various ways like a sudden fluctuation in the traffic of a website or unreal raise in the requests to resources. DDoS attacks are among the four most malicious attacks, like social engineering, ransomware, and supply chain attacks. It’s relatively easy to confuse DDoS attacks with other cyber threats. As for now most of our application and infrastructure resides on the cloud. As for cloud providers, the services provider must facilitate some tools to prevent the attack on their services and their user. Some of the major cloud providers give us this type of facility (AWS, Azure, and GCPThis cloud service provider offers cloud DDoS mitigation and prevention that operates entirely outside of your current network, inside the Internet cloud, and can identify and stop DDoS attacks before they even get to you. For bigger installations, routing is utilised to ensure that all network traffic, regardless of type, is filtered before delivery via a clean pipe. Domain name system (DNS) is used to direct inbound traffic through a scrubbing centre before delivery to the server. DDoS mitigation and prevention in the cloud is not only speedy, but also incredibly effective at stopping DDoS attacks.