Next-Generation Firewalls and AI-Based Detection Systems for DDoS Mitigation
摘要
Distributed denial of service (DDoS) attacks have become one of the most common security and digital infrastructure threats. Overwhelmed by targeted systems with too many vehicles to interfere with regular operations, these attacks have grown in sophistication and magnitude. As organisations increasingly rely on digital infrastructure, mitigating DDoS attacks has become a top priority. Traditional network security solutions, such as firewalls, intrusion detection systems and rate-limiting mechanisms, have played an essential role in providing security. Still, the increasing nature of DDoS attacks requires advanced security measures. Two technologies that have emerged as promising solutions are next-generation firewalls (NGFWs) and artificial intelligence sensing. These technologies offer advanced capabilities beyond traditional approaches by enabling real-time risk management, adaptive response and mitigation. This paper analyses the design and operation of NGFW and AI-based systems in detail and investigates their role and effectiveness in mitigating DDoS attacks. Through theoretical analysis and analysis of real-world case studies, the paper aims to provide insights into the strengths, challenges and future developments of using this technology to prevent DDoS attacks.