一种针对SYN-Flooding攻击的防范方法

Study on Defense against a SYN-Flooding Attack

针对SYN-Flooding攻击的特点,分析了几种防御SYN-Flooding攻击的方法,本文提出了一种TCP/IP“一次握手”协议防御方法,即服务器对客户端的传输连接响应通过代理服务器判断,按照前向神经网络的时间统计概率PE值后排序提交,解决了分布式拒绝服务攻击,特别是系列攻击和重复攻击对资源过量占用引起系统瘫痪的问题。攻击防御实验表明,本文方法防御SYN-Flooding攻击有明显效果。

The existing mehods of defense against SYN-Flooding attack have been analyzed. And then, a new method called TCP/IP-“Shake hands once” to prevent the SYN-Flooding attack, in which the system crashes because of the source exhausted, is pointed out in this article. The response of the server on the clients for transfer is made by the attorney, and the service of the server to the clients will be arranged according to the PE. The result of the experiments shows that the method is more effective than others.