Analyzing Large DDoS Attacks Using Multiple Data Sources

This paper presents a measurement study analyzing DDoS attacks from multiple data sources, relying on both direct measurements of flow-level information, and more traditional indirect measurements using backscatter analysis. Understanding the nature of DDoS attacks is critically important to the development of effective counter measures to this pressing problem. While much of the community's current understanding of DDoS attacks result from indirect measurements, the analysis suggests that such studies do not give a comprehensive view of DDoS attacks witnessed in today's Internet.