A Stateful Inspection Model Based on Adaptive Threshold Algorithm for Defense of SYN Flood Attacks
Zhengmin Xia · Information Security and Communications Privacy · 2010
SYN FFlood attacks send large numbers of SYN packets to firewall in a short time, thus causing the iptables of state inspection firewall to overflow and eventually to downgrade the performance of the entire network system. Based on the architecture for state inspection model against SYN Flood attacks, this paper presents a new state inspection model based on adaptive threshold algorithm, which could automatically start the adaptive threshold algorithm to pre-treat the flow and thus to protect the security of the state inspection firewall under high-intensity attacks prevent the host from SYN FFlood attacks and enhance the state inspection firewall self-defense to a certain extent.