This Small Business Innovation Research (SBIR) Phase I project addresses Distributed Denial of Service (DDoS) attacks that pose a serious threat to the Internet and to online businesses by blocking legitimate transactions and preventing normal network operations. Currently there are few efficient network level DDOS solutions available on the market. The proposed flow based perturbation technology addresses the DDoS problem from using perspective. To date, the effort has successfully demonstrated some aspects of the technology and its high capacity in detecting and filtering DDOS traffic in a live 22,000 node network. The SBIR sponsored research will further improve the CAP algorithm on several aspects such as optimal test hierarchy and handling non-TCP traffic
