Detecting and Alerting TCP-IP Packets Againt TCP SYN Attacks

Free registration required

Executive Summary

Transmission Control Protocol SYNchronized (TCP SYN) flood has become a problem to the network management to maintain the network server from being attacked by the malicious attackers. Possibly one of the problems in detecting SYN Flood is that hosting server nodes or firewalls cannot distinguish the SYN packets of normal TCP connections from the user of SYN flood attack. Moreover, considering that the fee of normal network traffic differentiates, the users are unable to work with an explicit threshold of SYN arrival rates out to detect SYN flood traffic.

  • Format: PDF
  • Size: 316.23 KB