Application-Layer DDoS in Enterprise Networks and in the Cloud: Comprehensive Detection and Mitigation

对数据可用性的攻击通常被称为拒绝服务（DoS）攻击，分布式拒绝服务（DDoS）攻击是其最有效的形式。如今，只要有电脑和互联网连接，任何人都可以轻松实现复杂而强大的DDoS攻击。只需花费100美元就可以获得自己动手的简单部署DDoS攻击工具。租用僵尸网络的价格也低至每小时50美元。由于其巨大的可负担性和巨大的破坏潜力，DDoS攻击已成为许多不同个人/团体的首选武器，从出于经济动机的网络犯罪分子到出于政治动机的“黑客激进分子”。去年，仅在美国，平均每小时就发生28次DDoS攻击，平均每小时DDoS造成的停机成本估计为10万美元。超过40%的受DDoS影响的公司（每家公司）因此损失超过100万美元。

Attacks on data availability are commonly referred to as Denial of Service (DoS) attacks, with Distributed Denial of Service (DDoS) attacks being their most potent form. Nowadays, the means to carry out sophisticated and potent DDoS attacks are within easy reach of anyone with a computer and an Internet connection. Do-it-yourself simple-to-deploy DDoS attack tools can be obtained for only a few $100. Botnets-for-rent are also available for as little as $50 per one hour of rental time. Due to their great affordability combined with a significant damage potential, DDoS attacks have emerged as the weapon of choice for a number of different individual/groups, ranging from financially-motivated cyber criminals to politically-motivated ‘hacktivists’. Last year in the US alone an average of 28 DDoS attacks occurred every hour, with the average cost of 1 hour of DDoS-caused downtime estimated at $100,000. More than 40% of companies affected by DDoS have experienced consequent losses of over $1,000,000 (each).