Some experimental results about security solutions against DDoS attacks

Abstract

One of the most currently important security problems on the Internet network is Distributed Denial of Service (DDoS) attacks. There are many solutions [1], [2] for analysis and protection against DDoS attacks at the terminal equipment level (system client, server system), but there is still no universally valid solution for any type of DDoS attack, at the network level. Our proposed method is based on the results of informational correlation [3] to the statistical control study, considering the three partitions of traffic flow defined in [4]. In the second part of the paper we present the technologies and the software solutions we used for the development and implementation of a monitoring application, identification and filtering of DDoS attacks. The theoretical issues that concern the proposed method are presented in the third part of the paper. The application testing made in a virtual and in a real environment is presented in the fourth part of the paper.