Detection and prevention of distributed denial of services attacks by collaborative effort of software agents, first prototype implementation

摘要

Distributed Denial of Services DDoS, attacks has becomeudone of the biggest threats for resources over Internet.udPurpose of these attacks is to make servers deny fromudproviding services to legitimate users. These attacks areudalso used for occupying media bandwidth. Currentlyudintrusion detection systems can just detect the attacks butudcannot prevent / track the location of intruders. Someudschemes also prevent the attacks by simply discardingudattack packets, which saves victim from attack, but stilludnetwork bandwidth is wasted. In our opinion, DDoSudrequires a distributed solution to save wastage of resources. The paper, presents a system that helps us not only in detecting such attacks but also helps in tracing and blocking (to save the bandwidth as well) the multiple intruders using Intelligent Software Agents. The system gives dynamic response and can be integrated with the existing network defense systems without disturbing existing Internet model. We have implemented an agent based networking monitoring system in this regard.