True Prevention of DNS based DDoS attacks

This was a research project that aimed at true prevention of DNS based DDoS attacks. In this project, I proposed a prevention scheme by efficiently utilising fields of IP header of a DNS request packet.

I tested the proposed algorithm by simulating a network in a Software Defined Network(SDN) using mininet and ryu-controller.

The proposed scheme was able to prevent upto 60% IP spoofed DNS based DDoS attacks.