Prevention Strategies and Network Intrusion Prevention Techniques for Dos Attacks

Abstract: Some of the most exciting attacks done on networks today are those that are difficult to track, and requires very minimal effort on the attacker’s part. Denial of Service (DoS) has the most destructive effects among the various online attacks which is hindering the security. The security experts are in tremendous pressure, to bring out effective defence solutions for the various attacks occurring recently. Variety of tools and coding are used to implement these destructive attacks. DoS attack has managed to exist in the internet for more than a decade as there is no steady solution to prevent this attack. The Intrusion prevention system is used as an extension of Intrusion detection system as a prevention technique for the DoS attacks. Network Intrusion Detection and Prevention system analyzes the packets coming and going through the interface. The paper provides the idea of various types of DoS attacks, detecting them and preventing them. There are many methods which are available to detect and resist the DoS attack. The detection and prevention techniques shown are effective for small network topologies and can also be extended to analogous large domains.

Keywords: Denial of Service (DoS), Distributed Denial of Service, IDS (Intrusion Prevention System), IPS (Intrusion Prevention System), NIDS (Network Intrusion Detection System)