Protecting Web Servers from DoS / DDoS Flooding Attacks A Technical Overview

Recently many prominent web sites face a new type of denial of service attack known as Distributed Denial of Service attack (DDoS). Organizations deploying security measures such as firewalls, and intrusion detection systems could face the traditional DoS attack. Yet there is no complete solution neither for protection from DDoS attack, nor for preserving network hosts from participating in such an attack. This paper explains how DoS/DDoS attacks are launched and discuss different proposed solutions that aimed to protect Web Servers from the attack or to minimize its effect. These solutions spreads over the organization’s entire Internet infrastructure, that includes boarder routers, firewalls, active monitors, load balancer, and the target host/server.