• Deepak Kumar
• Latha Banda`

DDoS attack is a threat to cyber security, its purpose is to disrupt the network or server’s normal operation. DDoS attacks can disable large enterprises from providing internet services. The objective of DDoS attacks is usually to flood the target network device or even the network itself with huge number of packets. DDoS attack operates by utilizing a large network of remote computers called botnets, grouped together in order to overwhelm another system’s connection or processor causing it to deny services to the legitimate traffic. The attack is relatively easy to perform but are hard to defend. Recognition of malicious packets is a complex task due to the similarity between legitimate and malicious packets, proposed DDoS mitigation technique is based on the Intrusion Detection and Prevention System along with diversion through routing and filtering for weeding out the malicious traffic. This paper gives an approach to mitigate the DDoS attacks using NIDS with Multilayer of firewall.

DDoS, Botnets, Types of DDoS attacks, IDS, IPS, HIDS, NIDS I

"DDoS Mitigation: An Approach Based on Network Intrusion Detection System", International Journal of Emerging Technologies and Innovative Research (www.jetir.org), ISSN:2349-5162, Vol.6, Issue 5, page no.352-357, May-2019, Available :http://www.jetir.org/papers/JETIR1905853.pdf

"DDoS Mitigation: An Approach Based on Network Intrusion Detection System", International Journal of Emerging Technologies and Innovative Research (www.jetir.org | UGC and issn Approved), ISSN:2349-5162, Vol.6, Issue 5, page no. pp352-357, May-2019, Available at : http://www.jetir.org/papers/JETIR1905853.pdf