Distributed Denial of Service Prevention Techniques

TL;DR

This paper reviews and classifies various DDoS prevention techniques, analyzing their strengths and weaknesses to aid security administrators in selecting appropriate defenses against evolving attacks.

Contribution

It provides a comprehensive classification and comparative analysis of existing DDoS prevention mechanisms, highlighting their advantages and limitations.

Findings

Different prevention mechanisms have unique strengths and weaknesses.

A classification framework helps understand the effectiveness of various techniques.

Guidance for security administrators to choose suitable DDoS defenses.

Abstract

The significance of the DDoS problem and the increased occurrence, sophistication and strength of attacks has led to the dawn of numerous prevention mechanisms. Each proposed prevention mechanism has some unique advantages and disadvantages over the others. In this paper, we present a classification of available mechanisms that are proposed in literature on preventing Internet services from possible DDoS attacks and discuss the strengths and weaknesses of each mechanism. This provides better understanding of the problem and enables a security administrator to effectively equip his arsenal with proper prevention mechanisms for fighting against DDoS threat.