The software company NikSoft is selling a new defense against DDoS attacks.
Their software looks at the source IP address on all incoming packets, and if it finds any IP address that accounts for more than 1% of traffic over the last hour, it installs an entry in the router that blocks all packets from that address for the next 24 hours.
Their marketing folks are claiming that this will stop all DDoS attacks cold in the water. Is this a good solution to the problem?