Defending Against SYN Flood Attack under Asymmetric Routing Environment
Tao Jianxi, Zhou Li, Zhou Zhou, Yang Rong, Yang Wei, Liu Qingyun · Advances in intelligent systems research/Advances in Intelligent Systems Research · 2013
SYN Flood attack is still one of the major distributed denial of service attacks.Any network device or computer system with connection state table may have the possibility of suffering from this attack.Moreover, under asymmetric routing environment, unidirectional traffic problem makes it more difficult to defend against SYN Flood attack.In allusion to this problem, this paper presents DARE, a novel SYN Flood defense architecture.It consists of a statistical attack detection strategy and a dual connection management strategy.We verify the feasibility and effectiveness of our method through experiments in real network environment.The results show that our proposed method can filter SYN flood traffic, and mitigate the pressure of network infrastructure.