The problem in this framework is th

The problem in this framework is that it lacks practical validation and is based on the assumption
that the number of modules in the system is directly proportional to the number of attacks expected.
Moreover, exhaustive monitoring of messages on each node would considerably slow the network
traffic. Finally, the framework lacks the proper mechanisms for node coordination in case of attack
incidence detection.
Riquet et al. [34] claim that “there is no strong solution available to prevent the DDoS attacks”. To
validate the claim, the authors conduct the experiment to evaluate the effectiveness of the actual security
solutions against distributed attacks. The security solutions involved in the experiment are SNORT and
commercial firewall. The authors conclude that the failure of security systems lies within two aspects:
either the security solution can be obsolete because it is not updated, or the solution can rely on
unsuitable methods. They did not propose any solution that can prevent distributed security attacks.
Other widely used DDoS countermeasures are firewalls. However, due to firewall location (at the border
of a network), it would not be able to detect distributed attacks once they are in the network [50].