| Description: |
The Denial of service (DoS) attack is one of the most widespread attacks that can be used to effectively bring the operation of a host/server to a standstill. One of the motives behind the DoS attack is to make the host/server unreachable to legitimate users. DoS could take one of three possible forms. First, an attacker could stop the network from transmitting the required messages to genuine users on the network. Alternatively, the network could be prompted to generate and spread messages which should not be spreading. The last and the most common form of DoS attack in recent times is an act of generating and transmitting excessive and unnecessary traffic (flooding the network) directed towards a selected network or host/server so as to stop legitimate users from gaining access or receiving the required service from the host/server. Therefore, it is essential to become aware of and mitigate or otherwise minimize the damages and losses that result from the impact of DoS attacks. The main aim of this paper is to critically examine, analyze and compare different DoS mitigation techniques (Mitigation using Hop-Count Filtering, Ingress Filtering, TCP probing for Reply Argument Packet Technique, History-based Attack Detection and Reaction (HADR), Hardware, Extended Access control list, Capability-based method), point out there weaknesses and strengths in order for network administrators to know which mitigation technique(s) will work best for his/her network |