A Scalable Architecture for Distributed Denial of Service Mitigation in Enterprise Networks

International Journal of Computer Science and Technology | Vol. 9, No. 4, April 2007 | pp. 25–32

DOI: 10.46882/2007/IJCST/094001

Research Article

Title: A Scalable Architecture for Distributed Denial of Service Mitigation in Enterprise Networks

Names of Authors: John A. Kingsley¹, Mariam O. Bello²

Authors’ Affiliations: ¹Department of Computer Science, University of Technology, Lagos, Nigeria; ²Department of Information Technology, Cyber Security Research Institute, Abuja, Nigeria

Abstract: Distributed Denial of Service (DDoS) attacks pose an escalating threat to corporate digital infrastructure, overwhelming server capacities and disrupting critical web operations. This paper presents a novel, scalable network architecture designed to detect and mitigate multi-vector DDoS floods in real time at the enterprise perimeter. The proposed framework combines software-defined networking (SDN) programmability with an edge-deployed statistical traffic analyzer. By continuously monitoring changes in entropy across network packet headers, the system flags anomalous traffic spikes before they reach core application servers. Evaluation results indicate that the mitigation architecture drops malicious volumetric traffic within 3.4 seconds of onset while preserving 98.6% of legitimate user sessions. Statistical validation confirmed a significant reduction in server CPU utilization during synthetic HTTP flood tests, dropping from a baseline saturation of 99% ± 1% down to a stable 24% ± 3% under peak attack volumes. The system maintains linear scalability up to a network throughput of 40 Gbps without introducing significant packet forwarding latency.

Keywords: DDoS mitigation, software-defined networking, network security, traffic entropy, enterprise architecture, edge computing

Manuscript Timeline: Received January 12, 2007; Revised February 24, 2007; Accepted March 15, 2007; Published April 5, 2007

Citation: Kingsley, J. A., & Bello, M. O. (2007). A Scalable Architecture for Distributed Denial of Service Mitigation in Enterprise Networks. International Journal of Computer Science and Technology, 9(4), 25–32.

Subscribe to read the full article: https://www.internationalscholarsjournals.org/subscribe-to-read