The week's pick
Random Articles
Reseach Article
A Comparative Study of Defense Mechanisms against SYN Flooding Attack
| International Journal of Computer Applications |
| Foundation of Computer Science (FCS), NY, USA |
| Volume 98 - Number 18 |
| Year of Publication: 2014 |
| Authors: Prathibha R. C, Rejimol Robinson R R |
10.5120/17282-7414
|
Prathibha R. C, Rejimol Robinson R R . A Comparative Study of Defense Mechanisms against SYN Flooding Attack. International Journal of Computer Applications. 98, 18 ( July 2014), 16-21. DOI=10.5120/17282-7414
Abstract
Distributed Denial-of-Service (DDoS) flooding attacks are a serious threat to the security of the internet. A DDoS attack makes a machine or network resources not usable by the legitimate clients. A SYN flood is a form of denial-of-service attack. An attacker sends SYN requests continuously to a target system to consume enough server resources and to make the system unable to respond to legitimate traffic. It is a threat to the network as the flooding of packets may delay other legitimate users from accessing the server and in severe cases may result the server to be shut down, wasting valuable resources. The objective of this paper is to review the detection mechanisms for SYN flooding. The advantages and disadvantages for some detection schemes are examined and their performance is compared.
References
- Saman Taghavi Zargar, James Joshi & David Tipper, "A Survey of Defense Mechanisms Against Distributed Denial of Service (DDoS) Flooding Attacks", Communications Surveys & Tutorials, IEEE, Volume:15 , Issue: 4, pp. 2049-2069, March 2013.
- Mehdi Ebady Manna, Angela Amphawan, "Review of SYN flooding attack detection mechanism", International Journal of Distributed and Parallel Systems (IJDPS) Vol. 3, No. 1, January 2012.
- S. Changhua, Jindou, F. , Lei, S. , & Bin, L. , "A Novel Router-based Scheme to Mitigate SYN Flooding DDoS Attacks," in IEEE INFOCOM (Poster), Anchorage, Alaska, USA, 2007.
- L. Yun, Ye, G. , & Guiyi, W. , "Detect SYN Flooding Attack in Edge Routers," International Journal of Security and Its Applications (IJSIA), vol. 3, pp. 31-45, 2009.
- C. Chin-Ling, " A New Detection Method for Distributed Denial-of-Service Attack Traffic based on Statistical Test," Journal of Universal Computer Science, vol. 15, pp. 488-503,2009.
- L. Fang-Yie, & Chia-Chi, P. , "Detecting DoS and DDoS Attacks using Chi-Square," in Fifth International Conference on Information Assurance and Security (IAS), Xian, 2009, pp. 255 – 258.
- L. M. Ibrahim, "Anomly Network Intrusion Detection System Based On Distributed Time-Delay Neural Network (DTDNN)," Journal of Engineering Science and Technology, vol. 5, pp. 457-471, 2010.
- Josep L. Berral, Nicolas Poggi, Javier Alonso, Ricard Gavalda, Jordi Torres, Manish Parashar , "Adaptive Distributed Mechanism Against Flooding Network Attacks Based on Machine Learning", Proceedings of ACM workshop on AISec, pp. 43-50, 2008.
- B. Al-Duwairi and G. Manimaran, " Intentional Dropping: A novel scheme for SYN flooding mitigation", in Global Internet Symposium, 2005.
- T. Peng, C. Leckie, and K. Ramamohanaroa, "Survey of network based defense mechanisms countering the DoS and DDoS Defense problems", ACM Comput. Surv. 39, 1, /article 3, April 2007.
- J. Mirkovic and P. Reiher, "A taxonomy of DDoS attack and DDoS defense mechanisms", ACM SIGCOMM Computer Communications Review, vol. 24, no. 2, pp. 39-53, April 2004.
- R. K. C. Chang, "Defending against flooding-based distributed denial of service attacks: A tutorial", Computer J. IEEE Commun. Magazine, Vol. 40, no. 10, pp. 42-51, 2002.
Index Terms
Keywords