An Efficient Dynamic Router Approach To Defeat DDOS Attack

Denial-of-service attacks represent a major threat to modern organizations that are increasingly dependent on the integrity of their computer networks. Recently many prominent web sites face so called Distributed Denial of Service Attacks (DDoS). Even there are many approaches to avoid DDOS attacks no approaches completely satisfies the protection yet. A new approach to combating such threats introduces dynamic routers into the network architecture. These dynamic routers offer the combined benefits of intrusion detection, and work collaboratively to provide a distributed defense mechanism. The paper provides a detailed description of the design and operation of the algorithms used by the dynamic routers and demonstrates how this approach is able to defeat the attacks. It is proposed that the adoption of a dynamic router approach in protecting networks overcomes many of these weaknesses and therefore offers enhanced protection. This paper discusses a simple, effective, and straightforward method for using ingress traffic filtering to prohibit DDoS attacks which use forged IP addresses to be propagate from 'behind a nearest router aggregation point.