Comparison between the prevention and detection approaches for the high-rate DDoS attacks

The salient features of cloud computing (such as on-demand self-service, resource pooling, broad network access, rapid elasticity, and measured service) are being exploited by attackers to launch the severe Distributed Denial of Service (DDoS) attack. Generally, the DDoS attacks in such an environment have been implemented by flooding a huge volume (high-rate) of malicious traffic to exhaust the victim servers’ resources. Thus, the study of various DDoS attacks and their corresponding defense approaches becomes essential to protect the cloud infrastructure from fatal effects of DDoS attacks. This work is a comprehensive comparison of all the possible variants of cloud DDoS attacks solutions with detailed insight into the prevention and detection mechanisms.

云计算的各项显著特征（例如按需自助服务（on-demand self-service）、资源池化（resource pooling）、泛网络接入（broad network access）、快速弹性伸缩（rapid elasticity）以及计量服务（measured service））正被攻击者利用，以发起严重的分布式拒绝服务（Distributed Denial of Service，DDoS）攻击。通常而言，此类云环境中的DDoS攻击均通过注入海量（高速率）恶意流量，耗尽受害服务器的资源来实现攻击。因此，研究各类DDoS攻击及其对应的防御方案，对于保护云基础设施免受DDoS攻击的致命影响至关重要。本研究针对云环境下DDoS攻击防御方案的所有可行变体开展了全面对比，并对防御与检测机制进行了深入剖析。