DDoS Attacks Detection and Mitigation Using Economic Incentive-Based Solution

Abstract

DDoS attack is posing an immense threat to Internet and online businesses. DDoS attack makes an online service unavailable to legitimate users by sending voluminous number of dummy requests or by exploiting some vulnerability or security flaws present in current Internet infrastructure. Information present on Internet needs to be defended against DDoS attack by not only technological means but also with the help of economic means using incentives as a tool. In this paper, we have proposed a model using a network management strategy which involves policies to maintain quality of service (QoS) during a DDoS attack. User must have sending rights in the form of contract to access server. A XML form having different fields on QoS parameters is provided by the service provider which a user has to fill with the help of policies present in policy pool. This XML form is turned into contract after evaluation by the control broker. Policy-based network management (PBNM) is used to execute proposed approach which enables user to have dynamic negotiation with the service provider on the cost and types of resources. Proposed model has been implemented on NS2. Results obtained from simulation show the supremacy of our proposed model.