Skip to main content

End to the Dark Web - How to Stop DDoS Attacks

 


            Distributed Denial of Services Attacks are a nuisance to all software services in the modern era which uses the internet as a platform to do business. I propose a simple solution to stop this kind of attack. The solution does not require any new hardware or revolutionary software. I provide a simple solution with simple software. 

The Behavior of DDoS Attackers

First, we will understand what is the behavior of DDoS Attackers. DDoS Attackers all open a particular web page at the same point in time, making the web page unavailable to legitimate users. They continuously refresh a web page at very short intervals. They refresh the Password Page at very short intervals say more than 5 times continuously. We can consider these behaviors as DDoS attackers behaviors. Now we will see how to stop this kind of attack.

Authenticators Connected to Smart Phones

We are going to change the way we use web pages in a very little way. Let's get to the idea. We should use Authenticators in our Smart Phones for important Websites like Amazon Web Services, or an Authenticator for a group of small websites like news websites. If you want to use the internet for important websites like Amazon Web Services, first you should open the Authenticator on your Mobile. Then when you open the AWS website, A plain or very little resource page like a Google Home page will be displayed from the DNS, designed by AWS. 

The first thing it will ask is your Mobile number. You should enter your Mobile Number. Upon receiving your mobile number, DNS will first check whether that Mobile Number's Authenticator Service is in open state. Otherwise, it will simply display a minimum resource page like "Open your Authenticator First". This is to make sure that anyone does not simply use some random Mobile Number and bug. If he bugs again and again with a random mobile number, his IP will be blocked for a while. This Service check will be universally done by the DNS for certain websites that avail this kind of service from DNS. DNS itself checks whether the Authenticator is open on your Mobile. After verifying that, DNS will ask you to enter the Authenticator Code. DNS will check the Authenticator code. If it is correct, DNS will direct the user to the website. Then the usual Web page service begins.

Penalize the DDoS Attackers

So, why would a DDoS attacker bother if he is not penalized? He will attack again and again. Isn't it that there is no loss for him? Let's penalize them. The Authenticator Service requires a caution deposit. Say Rs.1000. If you show the behavior of a DDoS attacker, your caution deposit will be gone. Let's say some X number of attackers show the behavior of DDoS on a particular website at a particular time. Is it not that the website is affected? Why don't we give half the penalized amount to them and the remaining to DNS? If they do that attack again, we will increase the caution deposit. Important conspirers who do this can be barred from using a particular service or the whole internet itself for a certain amount of period. We can even arrest them, or bring them before courts. We have their Mobile Numbers. Their Aadhaar Number is connected to their Mobile Number if they are in India. Their identity is with us.

Duration of Attacks

DDoS attack time will be calculated every 5- 10 minutes. If an attack happens in that time duration, all the DDoS attackers who show that behavior, not the ones who don't show that behavior, will be disconnected and penalized. All the resources will be freed and available in a maximum of 5-10 minutes. But the Penalized amount will be huge.

Comments

Popular posts from this blog

Security Feature for your Devices

This article is about a way to completely stop your devices from being stolen. The device can be anything from Mobile Phones to Laptops. The idea is to register your device with an Aadhaar Card when you buy it. When you lose your device, go to the service center, and give your biometric verification along with Aadhaar, like scanning your eye and giving your fingerprints. Upon receiving the complaint, the device firm will block the device, which can only be switched on when the firm gets back the device. Devices should be designed in a way, that re-installation of the Operating System, by erasing the old ones should not be allowed, when the device is blocked by the firm. Buy with Registration Whenever you buy a device, from Mobile Phones to Laptops, Even Smart TVs, Earphones, or Tablets, it should be registered with your Aadhaar Card. The process is simple, you don't need to keep records of your bill. Because most can't keep their purchase bill (Invoice) for years. All you need ...

Bus Timing Calculator System for Metro and Cosmopolitan City Buses

               City Buses in Metro and Cosmopolitan cities like Chennai and Bangalore need Bus Timing calculator Systems that allow them to track the timing of their buses. A passenger waiting for a bus needs to know when a particular bus will reach his bus stop so that he can plan his visit to the bus stop accordingly. He needs to know whether Bus 1 will come sooner to reach a destination or whether he can take Bus 2 through other routes to reach his destination. He needs to know how long he has to wait for a bus to come. He needs to know whether a bus will come to a bus stop or not. We need to design a Bus Tracking System that informs the customer about all these. Steps to follow to find the timings Step 1 : Install a GPS in every Bus in Metro and Cosmopolitan Cities. Most of them already have.  Step 2 : Let the bus travel on all routes as usual during the day and night and calculate the timings of the bus. The calculations are what...

DK Cryptographic Algorithm to withstand attacks from Quantum Computers

In this article, I propose a Cryptographic Algorithm, called DK Cryptographic Algorithm, which is so reliable and robust that even Quantum Computers will not be able to break it. E very time,  data is sent as a combination of numbers from 0 to 9, between the sender and the receiver, with no clue about the content of it. Since it simply involves the jumbling of numbers between 0 and 9, it can be implemented even by the simplest devices like Mobile phones. Deepak Kumar Cryptographic Algorithm Overview This is a simple symmetric key cryptographic algorithm, which uses a simple [0-9] Decimal array to transfer data from one machine to another.  It can withstand attacks by attackers using Quantum Computers, or any other sophisticated computers. Goals The goal of this algorithm is to send a text from Machine A to Machine B, even if intruders disrupt the communication, with huge computing abilities. Specifications This cryptographic algorithm establishes communication between two Mach...