Research on SynFlood Attack Target Locating Method
Huiyu Liu, Kai Chen, Xiaosu Chen · 2012
This paper proposes a new SynFlood attack target location method based on the Abnormal TCP Connection Graph (ATCG).The method build an Abnormal TCP Connection Graph based on the status of TCP connections.Then the method calculates the Abnormal Source Number (ASN) and Attack Intensity (AI).If such two values exceed the threshold defined in advance, the node which the IP address indicated can be determined as attack target.The simulation results indicate that the method has favorable accuracy and higher data packet processing capability.It can be deployed at the backbone router in a large or medium-sized network.