A robust scheme to detect SYN flooding attacks

Proceedings of the Second International Conference on Communications and Networking in China, ChinaCom 2007

Volumn , Issue , 2008, Pages 397-401

  Sun, Changhua ^a   Fan, Jindou ^a   Liu, Bin ^a  

^a TSINGHUA UNIVERSITY   (China)

Author keywords

[No Author keywords available]

Indexed keywords

FLOODING ATTACKS; NON PARAMETRIC CUMULATIVE SUM ALGORITHMS;

COMPUTER SIMULATION; DATA TRANSFER; INTRUSION DETECTION; NETWORK PROTOCOLS; PACKET NETWORKS;

NETWORK SECURITY;

EID: 43949089487     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/CHINACOM.2007.4469411     Document Type: Conference Paper

References (15)

1. CERT Advisory CA-1996-21 TCP SYN flooding and IP spoofing attacks. [Online]. Available: http://www.cert.org/advisories/CA-1996-21.html
2. "SYN cookies." [Online]. Available: http://cr.yp.to/syncookies. html
3. J. Lemon, "Resisting SYN flood DoS attacks with a SYN cache," in Proc. USENIX BSDCon, 2002.
4. W. Eddy, "TCP SYN flooding attacks and common mitigations," May 2007. [Online]. Available: http://www.ietf.org/internet-drafts/draft-ietf-tcpm- syn-flood-05.txt
5. H. Wang, D. Zhang, and K. G. Shin, "Detecting SYN flooding attacks," in Proc. IEEE INFOCOM, 2002.
6. W. Chen and D. Y. Yeung, 'Defending against TCP SYN flooding attacks under different types of IP spoofing," in International Conference on Networking, International Conference on Systems and International Conference on Mobile Communications and Learning Technologies (ICN/ICONS/MCL), 2006.
7. B. H. Bloom, "Space/time trade-offs in hash coding with allowable errors," Communications of the ACM, vol. 13, no. 7. pp. 422-426, 1970.
8. B. Brodsky and B. Darkhovsky, Nonparametric Methods in Change-Point Problems. Kluwer Academic Publishers, 1993.
9. "Syndefender." [Online]. Available: http://www.checkpoint.com/ products/firewall-1/
10. L. Fan, P. Cao, J. Almeida, and A. Z. Broder, "Summary cache: A scalable wide-area web cache sharing protocol," in Proc. ACM SIGCOMM, 1998.
11. A. Broder and M. Mitzenmacher, 'Network applications of bloom filters: A survey," in Allerton, 2002.
12. "Tsinghua dragonlab." [Online]. Available: http://dragonlab. org/traffic/
13. M. V. Ramakrishna, E. Fu, and E. Bahcekapili, "Efficient hardware hashing functions for high performance computers," IEEE Transactions on Computers, vol. 46, no. 12, pp. 1378-1381, 1997.
14. T. Darmohray and R. Oliver, "Hot spares for DoS attacks," Login: The Magazine of USENIX and SAGE, 2000. [Online]. Available: http://www.usenix.org/publications/login/2000-7/apropos.html
15. C. Sun, J. Fan, L. Shi, and B. Liu, "A novel router-based scheme to mitigate SYN flooding DDoS attacks," in Proc. IEEE INFOCOM (Poster), Anchorage, Alaska, USA, 2007.