An Enhanced Defence Method for TCP DDoS Attack
Jin Qiu · Journal of Zhongyuan University of Technology · 2009
SYN Flood attack is one of the most common distributed denial of service attack way.This paper presents an improved SYN Cookie method.A new cookie verification algorithm is designed and the definition of cookie field is changed,so that algorithm complexity with the ensurance of security is reduced.The test results show that the new method can be an effective defense against the TCP SYN Flood attack.The proposed method provides an average computational complexity reduction of 30% compared with the traditional method.