Analysis of Hybrid DDoS Defense to Mitigate DDoS Impact

As the number of compromised computers connected to the Internet and the speed of the Internet connection continue to increase, the Distributed of Denial of Service (DDoS) attacks to the popular web sites also shows a significant increase in terms of traffic volume. These compromised computers often controlled by botnets that attack a targeted online business computing resources, bringing financial impact to these businesses. A Hybrid DDoS defense, a combination of intermediate network defense (distributed) and victim network defense (centralized) is proposed in this paper. The proposed mitigation has been shown to reduce the DDoS impact up to 90% of the total traffic, covering both bandwidth and resource depletion attacks.