Filtering-Based Defense Mechanisms Against DDoS Attacks: A Survey
IEEE Systems Journal, cilt.11, sa.4, ss.2761-2773, 2017 (SCI-Expanded, Scopus)
- Yayın Türü: Makale / Tam Makale
- Cilt numarası: 11 Sayı: 4
- Basım Tarihi: 2017
- Doi Numarası: 10.1109/jsyst.2016.2602848
- Dergi Adı: IEEE Systems Journal
- Derginin Tarandığı İndeksler: Science Citation Index Expanded (SCI-EXPANDED), Scopus
- Sayfa Sayıları: ss.2761-2773
- Anahtar Kelimeler: Denial of service (DoS), distributed denial of service (DDoS), internet security, intrusion detection and prevention systems, traffic filtering
- Boğaziçi Üniversitesi Adresli: Evet
Özet
This paper presents a comprehensive survey on filtering-based defense mechanisms against distributed denial of service (DDoS) attacks. Several filtering techniques are analyzed and their advantages and disadvantages are presented. In order to help network security analysts choose the most appropriate mechanism according to their security requirements, a comparative classification of these methods is provided. The relevant research efforts are identified and discussed for rendering the current state of the art in the literature. This classification will also serve researchers to address weaknesses of these filtering methods, and thus mitigate DDoS attacks using more effective defense mechanisms.