Random Flow Network Modeling and Simulations for DDoS Attack Mitigation

Abstract—Recent events show that distributed denial-of-service (DDoS) attack imposes great threat to availability of Internet services. In this pa-per, we study and evaluate DDoS attacks in a random flow network model, a novel and general approach to DDoS attack prevention and tolerance. The model can be used to evaluate the effectiveness of a DDoS countermea-sure framework. Following the random flow network model and state-of-art Internet topology and traffic models, our simulation reveals the gen-eral relationship among several metrics derived from the model. Based on the simulation results, we suggest to build a more complete and effec-tive DDoS countermeasure framework using complementary solutions to achieve DDoS attack detection, prevention, and tolerance at same time. I