ddos protection needs to be handled from a server standpoint... you can't install anything into vbulletin or any php script to really create effective ddos protection. As long as you stay up to date vbulletin is as secure as forums come, I don't think you need to install any 'security mods' as long as you keep your forum up to date.
vBulletin also has a subscription system already built into it.
For the arcade search for ipbproarcade in the mods forum here at vbulletin.org
For the chatbox take a look at zero tolerance's vbshout. Again you can search here on the forums for that one. Also you can go to his site
www.infernotechnologies.net He also offers a pro-version for a nominal fee.