Research on SynFlood Attack Target Locating Method

摘要：

　　This paper proposes a new SynFIood attack target location method based on the Abnornal TCP Connection Graph (ATCG).The method build an Abnormal TCP Connection Graph based on the status of TCP connections.Then the method calculates the Abnormal Source Number (ASN) and Attack Intensity (AI).If such two values exceed the threshold defined in advance,the node which the IP address indicated can be determined as attack target.The simulation results indicate that the method has favorable accuracy and higher data packet processing capability.It can be deployed at the backbone router in a large or medium-sized network.

关键词： SynFlood Attack Abnormal TCP Connection Graph Attack Intensity

作者: Liu Huiyu Chert Kai Chen Xiaosu

作者单位: school of computer sci.& tech. huazhong Univ. of sei.& tech. wuhan,china

会议类型: 国际会议

会议名称: 2012 2nd International Conference on Computer Application and System Modeling(2012第二届计算机应用与系统建模国际会议)(ICCASM-2012)

会议地点: 沈阳

会议语种:英文

页码: 1435-1438

在线出版日期: 2012-07-27（万方平台首次上网日期，不代表论文的发表时间）