Distributed Denial of Service (DDoS) attack is one of the most disruptive attacks in computer networks. It utilizes legitimate requests from hundreds or thousands of computers to specific targets to occupy targets' bandwidth and deplete targets' resource. In this work, we have attempted to not only mitigate DDoS attacks but also identify the source of attacks even behind Network Address Translation (NAT). This is followed by remedial actions such as denying further access or informing them that they have participated in the attacks. This report presents a new algorithm to prevent servers from DDoS attacks. This algorithm requires that network routers or gateways collaborate with each other in order to detect suspicious traffic. The algorithm initiates a peer-to-peer communication among network routers or gateways to increase the probability of detecting unwanted traffic. We derive mathematical proofs based on cryptographic concepts such as birthday attacks to estimate the rate of attacks generated and passed along the routers. This implementation is to prevent the attacker from sending spam traffic to the server which can lead to DDoS attacks. The effectiveness of our implementation is evidenced in our experimental results.

�ber die Autorin bzw. den Autor

Dr. I. S. Amiri, received his B. Sc (Applied Physics) from Public University of Oroumiyeh, Iran in 2001 and a gold medalist M. Sc. from Universiti Teknologi Malaysia (UTM), in 2009. He was awarded a PhD degree in photonics in 2014. He has published more than 300 journals/conferences and books in Optical Soliton Communications, Laser Physics, Nanophotonics, Nonlinear fiber optics, Quantum Cryptography, Optical Tweezers, Nanotechnology, Biomedical Physics and Biotechnology Engineering.

��ber diesen Titel� kann sich auf eine andere Ausgabe dieses Titels beziehen.