Abstract

Nowadays, guarantee of secure communication is as important as the traditional computer and information security assurance. Presently Distributed Denial of Service (DDoS) Attacks are causing billions of dollars losses by affecting the normal functioning of organizations. DDoS attackers are infiltrating large numbers of computers by exploiting software vulnerabilities. By the time specific countermeasures are developed to prevent DDoS attacks, attackers enhance existing DDoS attack tools, developing new and derivative DDoS attack tools and techniques. Organizations are trying their best to minimize their losses from these systems. However, most of the organizations widely use the Intrusion Prevention Systems (IPS) to observe and manage their networks. In this paper the Preventive, Detective and Mitigation DDoS Defence techniques and Mechanisms have been discussed to strengthen existing IPS concepts, which can help to develop a new and intelligent Network Intrusion Prevention System. A new technique for an intelligent and smart Intrusion Prevention system has been introduced on the basis of Captcha, IP addresses, MAC Addresses and Application_Id.