A Method to Improve Stateful Inspection Firewall for Defending SYN Flood Attack
Yufang Zhang · Journal of Chinese Computer Systems · 2008
Contraposing Syn Flood attack which can affect the performance of Stateful Inspection Firewall greatly,this paper has analyzed the theory of Syn Flood attack.Based on Patrica tries to build half-open connection table to deal with the process of TCP connection,it puts forward a method of defending Syn Flood attack which leads in port queen to track each half-open connection,according to counting the number of SYN packets and checking the connection state.The result of the experiment shows that under using few system resources,this method has effectively improved the ability of defense of Syn Flood attack.