Blackholing vs. sinkholing: A comparative analysis

Abstract

Distributed denial of service attack has caused major security problems all over the world. Be it small systems, or large organizations, DDoS attack can have severe impact on their functioning. It is a method used by the attacker to suspend services to that system for a period of time so that legitimate users cannot access services. Many techniques have been developed to reduce the effect of DDoS attack on the system. In this paper, we study about two different methods used to detect and prevent DDoS attacks: Blackholing and Sinkholing. The purpose of this study is to identify when to use blackholing and when to use sinkholing.