Taxonomies of Distributed Denial of Service Networks, Attacks, Tools, and Countermeas

[ammar_secret]

This paper attempts a comprehensive scoping of the DDoS problem. We propose new taxonomies to categorize DDoS attack networks, to classify the different techniques used in a DDoS attack, and to describe the characteristics of the software tools used in setting up a DDoS attack network. These taxonomies help us to understand the similarities and differences in DDoS attacks and tools, and the scope of the DDoS problem. Given this new understanding, we propose classes of countermeasures that target the DDoS problem before, during and after an actual DDoS attack. This work is intended to stimulate research into creative, effective and efficient defenses and detection mechanisms for DDoS attacks, and to assist in creating comprehensive solutions that will provide a more generalized and effective approach to countering both known and derivative DDoS attacks.