查看文章

The main objective of this study is to design a hybrid technique to defend against the DDoS attack. Distributed Denial of Service (DDoS) attacks constitute one of the major threats and among the hardest security problems in today's Internet. With little or no advance warning, a DDoS attack can easily exhaust the computing and communication resources of its victim within a short period of time. A network simulation program NS2 will be applied to test the efficiency of the proposed technique in filtering out all the attack packets, and traceback them to their sources. Many criterias will be used to prove the efficiency of the proposed technique, one of them is the ratio of the dropped packets, the second is the ratio of the passed legal packets, and finally, the accuracy of determining the actual source of the attack packets. Applying these techniques will enhance and increase the efficiency in preventing the success of these DDoS attacks.