Abstract

Distributed Denial of Service (DDoS) attacks are attacks on computer systems (network resources or communication channels) that make them inaccessible to legitimate users. DDoS attacks involve sending a large number of simultaneous requests from one or more computers on the Internet towards a specific resource. If thousands, tens of thousands or millions of computers start sending requests to a particular server (or network service) at the same time, the server will fail or the bandwidth of the communication channel for this server will be insufficient. In both cases, Internet users cannot access the attacked server, or even all servers and other resources connected through the blocked communication channel. Many experts may be aware that there are specialized solutions to protect against DDoS attacks, which include traffic anomaly detection, traffic profiling and attack profiling, and sequential dynamic multistage traffic filtering. But sometimes more effective measures can be taken to suppress DDoS attacks through existing mechanisms of the data transmission network and its administrators.