Dynamic ddos defense with an adaptive spin lock rate control mechanism

Abstract

A Distributed Denial of Service DDoS attack is an explicit attempt newlineby an attacker to overload the server s or network s with useless traffic newlinewhich are capable of either crashing the host or disrupting degrading the newlinehost s service and rendering it unavailable for legitimate users The stateless newlinenature of the Internet dilution of locality in the flooding stream spoofed newlinesource address similarity of DDoS attack traffic to legitimate traffic and newlinecapacity of servers to establish a large volume of connections undermine the newlineeffectiveness of any proposed DDoS defense system DDoS defense newlinecomprises three aspects Detect the attack mitigate the effects of the attack newlineand ensure good service to legitimate clients and trace the source of the newlineattack Although several defense systems have been proposed by researchers newlinethe problem remains largely unresolved newline newline