Trust Based DDoS Defense System

Abstract

Distributed Denial of Service is an attack that aims to prevent legitimate clients to access a service by making it unavailable. This is done by sending multiple packets from different sources in order to disable the processing power of the victim system. My project aims at devising a procedure to prevent DDoS attack from taking place. Initially I have to simulate a DDoS attack using OMNeT++. I will be creating a network having multiple computers which act as the DDoS packet source. Also, there will be a server connected to a router. The router on the other side will be attached to these computer nodes. After assigning trust rating to each node, I will increase or decrease their rating based on the current behavior of different nodes. This way, my system attempts to block high packet traffic to the server so as to thwart the server to crash due to DDoS attack. In phase 1 I have simulated a network topology to carry out DDoS attack on victim server. In phase 2, which is in the future, I will be implementing the trust based scenario on the network