一种基于Patricia树的检测Syn Flood攻击的方法

A Method to Detect Syn Flood Attack Based on Patricia Tree

分析了Syn flood攻击的原理、攻击的方式及其基本特征。利用Patricia树进行SYN流量统计,并提出了改进的TCP连接状态检测。试验表明,该检测算法在占用很少系统资源的情况下,准确检测到Syn flood攻击。

This paper analyzes the theory, attack model and the basic character of Syn flood. Patricia binary radix tree is used to count the number of the syn packets, check the connection state by an improved method. In this way, the Syn flood attack can be detected with few resources.