GA-Based Filtering Algorithm to Defend against DDoS Attack in High Speed Network

With the DDoS (distributed denial of service) traffic which was implemented using depleted bandwidth is filtered by routers in high speed network, it is impossible for the victim to work on the individual level of on-going traffic flows. The scheme establishes the source and destination IP address database by observing the normal traffic and storages it in a Bloom Filter table. The Netflow statistics is mainly used to allocate the weights for traffic routing by routers. A new algorithm is thus proposed to get efficiently maximum traffic by GA with the traffic filtered by routers, and its feasibility and validity have been verified in real network circumstances.