An efficient anti-DDoS mechanism using flow-based forwarding technology

Abstract

During the last “7.7 cyber attack”, a lot of web servers in Korea suffered from DDoS attacks even while most of the systems are believed to be guarded by various kinds of security systems. This is because it takes long to analyze and detect the attacks to filter out the traffic in most of the current anti-DDoS systems. In this paper, we propose an anti-DDoS mechanism using flow-based network forwarding technology which filters out DDoS attack traffic effectively before the other professional anti-DDoS systems can finish analysis of the attacks and react against them.