In February of 2000, a series of massive denial-of-service attacks incapacitated several high-visibility Internet e-commerce sites, including Yahoo, Ebay, and E~*trade. Next, in January of 2001, MS's name serer infrastructure was disabled by a similar assault. Despite attacks on high-profile sites, the majority of attacks are not well publicized. Many other domestic and foreign sites have also been victims, ranging from smaller commercial sites, to educational institutions, public chat servers and government organizations The traffic generated by each host do not cause significant damage, but the extreme traffic directed toward a target machine under a DDoS attack creates a network congestion around the target machine. The possibilities of similar bandwidth consumption DDoS attacks seem endless, but they have an important feature in common. In this paper, we provide a comparative analysis of several bandwidth consumption DDoS tools, report the results through the experiments of some distributed tools and finally talk about some countermeasures against bandwidth consumption DDoS attacks.
展开▼