Design and Implementation of a New Hybrid Defense Mechanism Against DDoS Attacks

DDoS attacks leads cybercrime attacks and considered as the most difficult type of attacks because attackers use fake identities and launched using IP spoofing and deceive target servers by masquerading legitimate identity. Some of the existing techniques (e.g., Traceback and Hop Count) focus on tracking the source of the attack and identify malicious packets during the attack. This paper proposed a new hybrid defense mechanism that filters the traffic of packets at early stage before reaching target server and blocks malicious packets. A set of experiments were carried out using OPNET Modeler network simulation software showing that the accuracy of the proposed mechanism is 99.97%.