Novel Method of Defeding SYN Flooding Attack Based on State-Less Connection Authentication
Yin Baolin · Mini-micro Systems · 2005
The current detecting and defending technologies against SYN flooding attack have a common shortage which needs to allocate some system resources to save the state information before the TCP connection request is authenticated.The known state-less authentication method can solve the above problem,but unfortunately it still has some limitations which can not accommodate the system with integrated state information which is necessary to the TCP connection process and make the state variance between the client and server.A new state-less authentication method is proposed in this paper to defend SYN flooding attack in gateway,which can eliminate the above-mentioned drawbacks.The new mechanism can be compatible with the standard of TCP/IP protocol stack and protect all kinds of operating systems in gateway near to victim.