Analyzing well-known countermeasures against distributed denial of service attacks

被引:75
作者
Beitollahi, Hakem [1 ]
Deconinck, Geert [1 ]
机构
[1] Katholieke Univ Leuven, Dept Elect Engn, Louvain, Belgium
关键词
Distributed denial of service attacks; DDoS; Flooding attacks; Countermeasures; Network security; DDOS ATTACKS; DEFENSE; MARKING;
D O I
10.1016/j.comcom.2012.04.008
中图分类号
TP [自动化技术、计算机技术];
学科分类号
0812 ;
摘要
This paper reviews and analyzes well-known countermeasures against distributed denial of service (DDoS) attacks. This paper provides an in-depth analysis of each countermeasure and enumerates strengths and challenges of each technique. If it is possible, the paper designs a countermeasure against each defense mechanism from the attacker's point of view. We believe that this survey is the most complete survey that analyzes the most cited DDoS defense techniques in detail. We expect that this survey will assist the potential victims to choose suitable countermeasures against DDoS attacks based on the analysis presented here and as well as the capabilities that they have to implement the techniques. The analysis done in this paper provides a great opportunity for both academic and industrial researchers to improve the state of the art countermeasures against DDoS attacks. (c) 2012 Elsevier B.V. All rights reserved.
引用
收藏
页码:1312 / 1332
页数:21
相关论文
共 77 条
  • [1] Trade-offs in probabilistic packet marking for IP traceback
    Adler, M
    [J]. JOURNAL OF THE ACM, 2005, 52 (02) : 217 - 244
  • [2] Aikat J., 2003, P 3 ACM SIGCOMM C IN, P279, DOI DOI 10.1145/948205.948241
  • [3] [Anonymous], P 2011 IEEE C COMP C
  • [4] [Anonymous], WHY IS CAPTCHA SO AN
  • [5] [Anonymous], WHY YOU SHOULD NEVER
  • [6] Armitage G., 2001, ESTIMATING PENETRATI
  • [7] Athanasopoulos E, 2006, LECT NOTES COMPUT SC, V4237, P97
  • [8] Baig H, 2006, ICECE 2006: PROCEEDINGS OF THE 4TH INTERNATIONAL CONFERENCE ON ELECTRICAL AND COMPUTER ENGINEERING, P591
  • [9] Beitollahi H., 2011, 0820110115 ESAT U LE
  • [10] A Cooperative Mechanism to Defense Against Distributed Denial of Service Attacks
    Beitollahi, Hakem
    Deconinck, Geert
    [J]. TRUSTCOM 2011: 2011 INTERNATIONAL JOINT CONFERENCE OF IEEE TRUSTCOM-11/IEEE ICESS-11/FCST-11, 2011, : 11 - 20