Research on SynFlood Attack Target Locating Method

DOI

10.2991/iccasm.2012.367How to use a DOI?

Keywords

SynFlood Attack, Abnormal TCP Connection Graph, Attack Intensity

Abstract

This paper proposes a new SynFlood attack target location method based on the Abnormal TCP Connection Graph (ATCG). The method build an Abnormal TCP Connection Graph based on the status of TCP connections. Then the method calculates the Abnormal Source Number (ASN) and Attack Intensity (AI). If such two values exceed the threshold defined in advance, the node which the IP address indicated can be determined as attack target. The simulation results indicate that the method has favorable accuracy and higher data packet processing capability. It can be deployed at the backbone router in a large or medium-sized network.

Copyright

© 2012, the Authors. Published by Atlantis Press.

Open Access

This is an open access article distributed under the CC BY-NC license (http://creativecommons.org/licenses/by-nc/4.0/).

Download article (PDF)

TY  - CONF
AU  - Huiyu Liu
AU  - Kai Chen
AU  - Xiaosu Chen
PY  - 2012/08
DA  - 2012/08
TI  - Research on SynFlood Attack Target Locating Method
BT  - Proceedings of the 2012 International Conference on Computer Application and System Modeling (ICCASM 2012)
PB  - Atlantis Press
SP  - 1435
EP  - 1438
SN  - 1951-6851
UR  - https://doi.org/10.2991/iccasm.2012.367
DO  - 10.2991/iccasm.2012.367
ID  - Liu2012/08
ER  -