Ways for protection against various attacks in the Internet

Abstract

With the growing of network attacks, it has been difficult to protect the internet based services just by differentiating attack traffic from that of legitimate traffic. Denial of Service attacks and link flooding attacks are one of the major problems of security in networks. Because of the attack, heavy traffic will be generated in a network resource so that it becomes very slow to process information. In this paper, we describe various Attacks such as Distributed Denial of Service (DDoS) Attack, and various dangerous Link flooding attack, how they are caused and some of the methods to reduce the traffic caused because of them. Also, a filter called RainCheckFilter is described in detail. This filter is used for distinguishing flash crowd and DDoS. It also assures the clients that service can be accessed in a bounded waiting time by prioritizing the clients based on how long they have waited for the service. The limitations of every method to reduce the traffic are also explained.