DDoS defense as a network service

While distributed denial-of-service (DDoS) threats have been raising concerns for many years, a widely-acceptable solution is still absent. In this paper, we advocate a novel and promising solution for DDoS defense by using powerful cloud infrastructures as new battlefields. To explore this idea, we design and implement a cloud-based attack defense system called CLAD, which is running on cloud infrastructures as a network service to protect Web servers.