Performance analysis of layer 3 and layer 4 distributed denial of service attacks and prevention methods

Distributed denial of service attacks (DDoS) are one of the most common types of attacks that prevent legal network access today. The main purpose of the attack is to cause serious financial damage by disrupting the services of organizations providing services over the Internet or to put pressure on government institutions by disrupting their functioning for political reasons. DDoS attacks are a type of attack that is generally based on computers called "botnets" or "zombies" connected to a central system on the world's largest network, the Internet, collectively consuming target resources and preventing access. These types of attacks are based on the idea that the legitimate user has access to data that provides value to the organization and that removing that access causes the most damage. There are various attack types in OSI layers. In this thesis, the effects, prevention and mitigation of DDoS attacks occurring at the 3rd and 4th layers were studied. The service effects of attacks on layers were observed and the performance analysis of the applied prevention methods was made. The materials to be used in this study are attack types, package types used, bandwidth, traffic analysis. Each type of attack, its effects and prevention methods used in the study were applied in a laboratory environment, measurements will be made and the results will be observed.