Depth Analysis On DoS & DDoS Attacks
Gaurav Nayak, Anjana Mishra, Uditman Samal, Brojo Kishore Mishra · 2022
Denial of Service (DoS) attacks are some of the most expensive and threatening cyberattacks that exist on the internet. Their main aim is to restrict the users/ victims’ access to a specific resource. This chapter comprises all ideas, classification, and solutions to a DoS attack. DoS compromises the availability goal of the CIA triad [16]. Here, DoS attacks are classified into the network and attacker behavior like TCP SYN, which is network-based, whereas a UDP attack is bandwidth-based. Distributed Denial of Service (DDoS) is the revamped and advanced version of DoS which uses multiple sources/zombies/agents to carry out the attack. Zombies/ Agents are the compromised computers that attackers use to attack another computer. Viruses, worms, and Botnet are the main reasons for DDoS attacks. Due to DoS attacks, there is a threat to major new technologies such as VANET, IoT, etc., which are not yet fully developed. To avoid DoS attacks users must install regular security patches, antivirus, and anti-trojan software and also run firewalls. Post-Attack Forensics is the type of countermeasure in which a pattern of the traffic of a previous DDoS attack is collected to identify and block the same kind of attack.