On Modeling Counteraction against TCP SYN Flooding

Authors:
Vladimir V. Shakhov;Hyunseung Choo
Affiliations:
Institute of Computational Mathematics and Mathematical Geophysics of SB RAS, Novosibirsk, Russia 630090;School of Information and Communication Engineering, Sungkyunkwan Univ., Suwon, South Korea 440-746
Venue:
Information Networking. Towards Ubiquitous Networking and Services
Year:
2008

Citing 11
Cited 0

TCP/IP illustrated (vol. 1): the protocols

TCP/IP illustrated (vol. 1): the protocols
Probability and Statistics with Reliability, Queuing and Computer Science Applications

Probability and Statistics with Reliability, Queuing and Computer Science Applications
Denial-of-Service Attacks Rip the Internet

Computer
Improving the functionality of syn cookies

Proceedings of the IFIP TC6/TC11 Sixth Joint Working Conference on Communications and Multimedia Security: Advanced Communications and Multimedia Security
Analysis of a Denial of Service Attack on TCP

SP '97 Proceedings of the 1997 IEEE Symposium on Security and Privacy
Discord model for detecting unexpected demands in mobile networks

Future Generation Computer Systems - Special issue: Modeling and simulation in supercomputing and telecommunications
Change-Point Monitoring for the Detection of DoS Attacks

IEEE Transactions on Dependable and Secure Computing
Defending Against TCP SYN Flooding Attacks Under Different Types of IP Spoofing

ICNICONSMCL '06 Proceedings of the International Conference on Networking, International Conference on Systems and International Conference on Mobile Communications and Learning Technologies
Resisting SYN flood DoS attacks with a SYN cache

BSDC'02 Proceedings of the BSD Conference 2002 on BSD Conference
Inferring internet denial-of-service activity

SSYM'01 Proceedings of the 10th conference on USENIX Security Symposium - Volume 10
A novel approach to detection of intrusions in computer networks via adaptive sequential and batch-sequential change-point detection methods

IEEE Transactions on Signal Processing

Quantified Score

Hi-index	0.00

Visualization

Abstract

One of the main problems of network security is Distributed Denial of Service (DDoS) caused by TCP SYN packet flooding. To counteract SYN flooding attack, several defense methods have been proposed. In this paper we investigate a survivability of protected servers under SYN flooding. Analysis and comparison of some typical and well-known defense mechanisms are presented. We discuss critical parameters of the protection. Appropriated mathematical models based on stochastic processes are produced.