A detection design for distributed denial of service attack

Distributed Denial of Service (DDoS) attack is one of the most threat attack in the Internet. Once DDoS attack occurs, the target system cannot work correctly. At first we describe some Denial of Service (DoS) attacks classifications and these characteristics. It has also described Distributed Denial of Service (DDoS) attacks and its some protecting approaches. In this paper, we assume that the intruder's objective is to render target system in accessible by legitimate users. From this point of view, very simplified DDoS detection design has been proposed. The design request to observe the traffics sent to victim system only. This design do not need any information of source node for detecting DDoS attack The only thing we have to pay attention to is the total number of packets sent to the target system. This method is designed with Intrusion Detection System base system. Of course, if we want to protect and/or recover against the DDoS attack, we need source nodes information to do it.