An Adaptive Distributed Denial of Service Attack Prevention Technique in a Distributed Environment

• Published in: Sensors (Basel, Switzerland) Vol. 23; no. 14; p. 6574
• Main Authors: Riskhan, Basheer, Safuan, Halawati Abd Jalil, Hussain, Khalid, Elnour, Asma Abbas Hassan, Abdelmaboud, Abdelzahir, Khan, Fazlullah, Kundi, Mahwish
• Format: Journal Article
• Language: English
• Published: Switzerland MDPI AG 21.07.2023; MDPI
• Subjects: Assaults; attack mitigation; Collaboration; Customer services; Cyberterrorism; DDoS attack; Decentralization; Denial of service attacks; Identification; Methods; Network security; Prevention; security; Software; SYN attack; Victimization; DDoS attack; security; SYN attack; attack mitigation
• ISSN: 1424-8220; 1424-8220
• DOI: 10.3390/s23146574

Cyberattacks in the modern world are sophisticated and can be undetected in a dispersed setting. In a distributed setting, DoS and DDoS attacks cause resource unavailability. This has motivated the scientific community to suggest effective approaches in distributed contexts as a means of mitigating such attacks. Syn Flood is the most common sort of DDoS assault, up from 76% to 81% in Q2, according to Kaspersky's Q3 report. Direct and indirect approaches are also available for launching DDoS attacks. While in a DDoS attack, controlled traffic is transmitted indirectly through zombies to reflectors to compromise the target host, in a direct attack, controlled traffic is sent directly to zombies in order to assault the victim host. Reflectors are uncompromised systems that only send replies in response to a request. To mitigate such assaults, traffic shaping and pushback methods are utilised. The SYN Flood Attack Detection and Mitigation Technique (SFaDMT) is an adaptive heuristic-based method we employ to identify DDoS SYN flood assaults. This study suggested an effective strategy to identify and resist the SYN assault. A decision support mechanism served as the foundation for the suggested (SFaDMT) approach. The suggested model was simulated, analysed, and compared to the most recent method using the OMNET simulator. The outcome demonstrates how the suggested fix improved detection.