Investigation of Protection Mechanisms Against DRDoS Attacks Using a Simulation Approach

摘要

Nowadays, permanent availability is crucial for a growing number of computer services. An increasing quantity and power of DoS attacks frequently disrupts online network communication. Therefore it is important to create new effective defense methods for networks. In this paper we outline a programming library for the simulation of distributed reflected denial of service attacks and security mechanisms against them. Using this framework, a protection mechanism to detect and mitigate DRDoS attacks based on DNS and NTP protocols is developed. To evaluate the effectiveness of the proposed protection mechanism, a series of experiments was conducted. Also a comparison between the proposed protection mechanism and the protection mechanisms proposed by other researchers was carried out.