A divide-and conquer strategy for thwarting Distributed Denial-of-Service attacks

The Attack Diagnosis (AD), a novel attack mitigation scheme that adopts a divide-and-conquer strategy to throttle attack traffic generated in Distributed Denial-of-Service (DDoS) attacks, is described. AD consists of a repetitive process of isolating an attacker and filtering its traffic whereas Parallel Attack Diagnosis (PAD) can throttle traffic coming from multiple attackers simultaneously and both of them are found to be robust against Internet protocol (IP) spoofing with low false positive ratios.