Efficient and secure DNS cyber shelter on DDoS attacks

DDoS (distributed denial of service) attack is one of the most effective cyber-attack on the Internet. Many researchers focus on DDoS countermeasures. Many countermeasures of DDoS have been developed. However, there is no perfect solution for DDoS because DDoS attacks use normal requests which are hardly detected. DDoS attacks typically exhaust bandwidth, processing capacity, or memory of a targeted machine, service or network. Despite countless efforts in against DDoS attacks in the past decade, DDoS attacks are still a serious threat to the Internet environment. In this research, DNS cyber shelter is proposed. DNS cyber shelter is sort of DMZ (DE military Zone) which is separated by inside networks. DNS cyber shelter monitors or analyzes every outside requests for possible malicious behaviors or threats. Therefore, DNS cyber shelter will be able to detect and defense DDoS attack effectively.