SYN Flood Defense in Programmable Data Planes
Dominik Scholz, Sebastian Gallenmüller, Henning Stubbe, Georg Carle · 2020
The SYN flood attack is a common attack strategy as part of Distributed Denial-of-Service, which steadily becomes more frequent and of higher volume. To defend against SYN floods, preventing valuable service downtime, malicious traffic has to be separated from legitimate TCP requests. For this challenge, sophisticated filtering mechanisms operating at high bandwidths are needed.