DDoS Protection and Mitigation

Anomaly filtering

Protocol vulnerability defense

Defense against IP spoofing, LAND, Fraggle, Smurf, WinNuke, Ping of Death, Tear Drop, IP Option, IP fragment control packet, TCP label validity check, large ICMP control packet, ICMP redirect control packet, and ICMP unreachable control packet attacks.

Transport-layer attack defense

Defense against SYN flood, ACK flood, SYN-ACK flood, FIN/RST flood, TCP fragment flood, UDP flood, UDP fragment flood, and ICMP flood attacks.

Scanning and sniffing attack defense

Defense against port scanning, address scanning, Tracert control packet, IP Option, IP timestamp, and IP routing record attacks.

DNS attack defense

Defense against forged source DNS query flood attacks, real source DNS query flood attacks, DNS reply flood attacks, DNS cache poisoning attacks, DNS protocol vulnerability attacks, and fast flux botnet.

Web attack defense

Defense against HTTP get/post flood attacks, CC attacks, HTTP slow header/post attacks, HTTPS flood attacks, SSL DoS/DDoS attacks, TCP connection attacks, Sockstress attacks, TCP retransmission attacks, and TCP null connection attacks.

VoIP attack defense

Defense against SIP flood attacks.

Zombie/Trojan horse/Worm attack defense

Defense against over 200 zombies, Trojan horses, and worms, such as LOIC, HOIC, Slowloris, Pyloris, HttpDosTool,
Slowhttptest, and Thc-ssl-dos