Finding the DDoS attacks in the network using distance based routing

Abstract

Distributed Denial of Service (DDoS) attack is a critical threat to the internet. Botnets are the engines behind them. Botmasters disables the detectors by mimicking the traffic patterns of the flash crowds. It is a critical challenge to those who defend against DDoS attacks. A discrimination algorithm is used to find the flow correlation coefficient to discriminate the attack flows from the flash crowds. We used a routing based algorithm to calculate the dynamic flow correlation coefficient and an IP trace back mechanism is used to find the attackers who mimic the traffic patterns of the flash crowds. We formulated the problem and presented the theoretical proof for the feasibility of the routing based method.