Detection of Distributed Denial of Service based on SYN and filtering mechanisms
Wei Zhang · Microcomputer Information · 2008
The principle of DDoS (Distributed Denial of Service) based on SYN was introduced.A detection method based on the net-work packet traffic and mechanisms of packet filtering were proposed.Though calculating the deviation from the latest instantaneous traffic to the prediction traffic and the quantity of incomplete connection, whether the host was attacked was decided.Though adding Message Authentication Code in the SYN packet after being attacked, the damage of DDoS can be reduced.