On the timing of applying resource separation during DDoS attacks

From the past few years, DDoS attack incidents are continuously rising across the world. Most of these DDoS attacks lasted lesser than 10 minutes time. In the state-of-the-art solutions, we see a class of methods which advocate for the separation of resources to minimize the attack driven resource contention. Resource separation requires additional resources to implement the DDoS defense. In this work, we address an important practical aspect related to the timing of separation. For this, we experimentally compare five scenarios in which different types of separation methods are applied at different timings. We observe that the “always ON” strategy is best among all giving minimum response time and no request failures.