DEFENSE AGAINST DISTRIBUTED DENIAL OF SERVICE ATTACK USING COLLABORATION BETWEEN ROUTERS

Abstract

Denial of Service (DoS) attacks constitute one of the major threats and among the hardest security problems in todays Internet. Of particular concern are Distributed Denial of Service (DDoS) attacks, whose impact can be proportionally severe. With little or no advance warning, a DDoS attack can easily exhaust the computing and communication resources of its victim within a short period of time. Because of the seriousness of the problem many defense mechanisms have been proposed to combat these attacks. This thesis work has been carried out to prevent ood based DDoS attack in collaborative manner. Detection of anomaly tra c is being carried out with exponential moving average and t-digest model which will calculate the extreme quantile very accurately. In each owing packet, identi cation eld has been modi ed so as to have router identi cation which will then used to detect and drop the packet after identi cation of attack.After detection of attack tra c at node near victim, the attack information is being shared with other router and each router will act upon the attack tra c so as to drop these packets at the node near the attack source.