DDoS Prevention System Using Multi-Filtering Method

Abstract

This paper proposes multi-filtering method to prevent DDoS attack. Several filtering methods are applied in two firewall architecture for effective DDoS prevention. In the first firewall, R-PA filtering algorithm and strict hop counter filtering method are applied by analyzing packet paths. In the second firewall, packets are examined to distinguish abnormal packets from normal packets. Security policy system monitors each user sessions and if the traffic is over the threshold value, the system blocks the session for an assigned time.