Experimental Study of DDoS Defense System for Web Service

Web services have become major targets of DDoS attacks that can inflict the most serious damage in terms of availability. The DDoS attack is one of the most serious threat to Internet services and further there is no perfect solution to defend against variously modified attacks to heterogeneous Internet services. To solve the problems, several defense mechanisms against DDoS attacks have been proposed in the literature. However it is not easy for a security manager to select solutions suited for his service environments. Under the respect, this paper is intended to classify DDoS defense systems based on the functional design method. Also we show various experimental results of DDoS defense systems by using our proposed classification of defense systems and performance metrics.