Mitigating denial of service attacks: a tutorial

摘要: This tutorial describes what Denial of Service (DOS) attacks are. how they can be carried out in IP networks, and one defend against them. Distributed DoS (DDoS) are included here as a subset attacks. A attack has two phases: deployment an phase. program must first deployed on or more compromised hosts before is possible. Mitigation requires thus defense mechanisms for both phases. Completely reliable protection is, however, not There will always vulnerable the Internet. many based ordinary use protocols, Defense depth needed to mitigate effect paper shortly proposed literature. The goal implement all possible defenses. Instead, should optimize trade-off between security costs acquired benefits handling most important risks. closely related risk management.