SYN Flooding攻击对策研究

Approach to Countermeasures of SYN Flooding Attack

分析了这种典型的拒绝服务攻击。在已有攻击防范方法的基础上,提出了改进后的对策,其中包括超时时间和积压队列SYN Flooding值的设定策略、简单的命令监测、包过滤防火墙的防范规则,以及利用防火墙作为代理、作为半透明网关等方法。

SYN Flooding attack, the typical denial of service attack is analyzed in this paper. We improved countermeasures which have been broughtforward, including how to set timeout and backlog value ,a simple command to supervisor, the rules setting of packet filter. The firewall as a relay and firewall as a semi-transparent gateway to protect against SYN Flooding attack are also proposed.