Detection Techniques against DDoS attacks: A Comprehensive Review

Abstract

Distributed Denial of Service (DDoS) attacks have also become a problem for users of computer systems connected to the Internet. So defending internet from these attacks has become the need of the hour. There are three solutions against DDoS attacks: Prevention, Detection and Reaction. Detection is one of the key steps in defending against DoS/ DDoS attacks. There are some challenges that has to face while adopting any of the detection technique. If attacks can be detected close to attack sources, attack traffic can be filtered before it wastes any network bandwidth. A good detection technique should have short detection time, low false positive rate, low false negative rate but high normal packet survival ratio. This review paper provides the comparative analysis of various detection techniques with their corresponding advantages and disadvantages.