Detection of SYN Flooding Attack Based on Semi-connected List
Zeng Yi-jing · Jisuanji gongcheng · 2011
This paper proposes an effective detection method against SYN flooding attack.The analysis is started from the traits of SYN flooding attack.In every time period,the semi-connected list of server is counted.The number of unacknowledged segments is calculated.The statistical sequence based on time comes into being with the method of compensation.An improved PCUSUM algorithm is used to detect attack.Experimental result shows that the algorithm can detect attack quickly and obtain lower false-positive rate than other similar methods,more accurate detection result can be provided.