would this stop DDoS attacks?

Question

Would the following stop or limit DDoS attacks?

a DDoS attack uses an army of remotely controlled computers or connected Internet devices to bombard a site [or DNS server] with millions of requests in a short time span.  The attackers use thousands of other people's computers to do this ...

but the act of doing so creates a huge spike in requests generated by each controlled computer -- thousands where the normal number in a time period is few.

Suppose ICAAN or similar agency required all ISPs to monitor their clients' IP addresses for such spikes and take action to refuse them service when spikes are detected.

Would this limit or defeat DDoS attacks?

and if so, what agencies would need to step up and tell the world's ISPs to either comply with this directive or be shut out of access to the world's Internet backbone?

Robert J · Answer

That's basically what the Cloudflare system does.

It's something like a distributed firewall that monitors new connections to any site and blocks malicious ones wherever found, well away from the target site, before the various connection attempts are near enough and concentrated down to do damage.

https://www.cloudflare.com/security/

? · Answer

It seems hard to control

chrisjbsc · Answer

No. Because the DDOS uses thousands of pcs well spread...

Anonymous · Answer

no.  
what does "Spock (rhp)" refer to?

would this stop DDoS attacks?

4 Answers