Abstract—The significance of the DDoS problem and the increased occurrence, sophistication and strength of attacks has led to the dawn of numerous prevention mechanisms. Each proposed prevention mechanism has some unique advantages and disadvantages over the others. In this paper, we present a classification of available mechanisms that are proposed in literature on preventing Internet services from possible DDoS attacks and discuss the strengths and weaknesses of each mechanism. This provides better understanding of the problem and enables a security administrator to effectively equip his arsenal with proper prevention mechanisms for fighting against DDoS threat.

Index Terms—DoS, DDoS, Network Security, Prevention.

B. B. Gupta is with the Department of Electronics & Computer Engg., Indian Institute of Technology, Roorkee, 247667 India. (phone: +91-9927713132; e-mail: bbgupta@ieee.org).
R. C. Joshi is with the Department of Electronics & Computer Engg., Indian Institute of Technology, Roorkee, 247667 India.
Manoj Misra is with the Department of Electronics & Computer Engg., Indian Institute of Technology, Roorkee, 247667 India.

Cite: B. B. Gupta, R. C. Joshi and Manoj Misra, "Distributed Denial of Service Prevention Techniques," International Journal of Computer and Electrical Engineering vol. 2, no. 2, pp. 268-276, 2010.