COMPARATIVE ANALYSIS OF VARIOUS DENIALS OF SERVICE (DoS) ATTACK MITIGATION TECHNIQUES

The Denial of service (DoS) attack is one of the most widespread attacks that can be used to 
effectively bring the operation of a host/server to a standstill. One of the motives behind the DoS attack is 
to make the host/server unreachable to legitimate users. DoS could take one of three possible forms. First, 
an attacker could stop the network from transmitting the required messages to genuine users on the 
network. Alternatively, the network could be prompted to generate and spread messages which should 
not be spreading. The last and the most common form of DoS attack in recent times is an act of 
generating and transmitting excessive and unnecessary traffic (flooding the network) directed towards a 
selected network or host/server so as to stop legitimate users from gaining access or receiving the 
required service from the host/server. Therefore, it is essential to become aware of and mitigate or 
otherwise minimize the damages and losses that result from the impact of DoS attacks. The main aim of 
this paper is to critically examine, analyze and compare different DoS mitigation techniques (Mitigation 
using Hop-Count Filtering, Ingress Filtering, TCP probing for Reply Argument Packet Technique, 
History-based Attack Detection and Reaction (HADR), Hardware, Extended Access control list, 
Capability-based method), point out there weaknesses and strengths in order for network administrators 
to know which mitigation technique(s) will work best for his/her network