A Security Architecture For Protecting Organizational Web-Based Information Systems Against Cyber DDOS Attacks

The growth of web technology has brought convenience to our life, since it has become the most important communication channel. However, now this merit is threatened by complicated network-based attacks, such as denial of service (DOS) and distributed denial of service (DDOS) attacks. Distributed Denial of Service (DDOS) attacks generate flooding traffic from multiple sources towards selected nodes. Information systems web based is any organized system for the collection, organization and communication of information. Overall the models to defend the information system web based is dividen into two part: architecture and defense system. An architecture to defense the web based information systems against DDOS attacks has four sub-problems: detection, identification, mitigation and filtering. To clear the simplest architecture the proposed security architecture is compared with other architecture. It is clear that a new kind of architecture has to be designed to counter this type of attack securitly. The proposed security architecture is used easily without any algorithm. It is clear that application-layer vulnerabilities impose an enormous risk for the availability of web services. Availability of web based information systems can be preserved during DDOS attacks by security architecture.