基于超时重发机制的SYN Flood攻击防御方法  

A Defensive Method of SYN Flood Attack Based on Retransmission Timeout Mechanism

作　　者：张德栋[1] Dedong Zhang(Institute of Computing Technology, China Academy of Railway Sciences, Beijing,100081, China)

机构地区：[1]中国铁道科学研究院电子计算技术研究所,北京100081

出　　处：《电子科学技术》2017年第4期87-90,共4页Electronic Science & Technology

摘　　要：SYN Flood攻击是DDoS中常用的攻击手段,本文针对当前SYN Flood攻击的特点,提出了一种基于超时重发机制的SYN Flood攻击防御方法。该方法可运行在服务器主机或防火墙上,具有易于实现,系统资源耗费小,不需要硬件支撑等优点。分析表明,该方法对SYN Flood攻击具有良好的防御效果。SYN Flood is a typical attack of DDoS.For the current characteristics of SYN Flood attack,thepaper proposes a new defensive method of SYN flood attack.This method can be run on the server host orthe firewall,with easy to implement,small consumption of system resources and not required hardware tosupport.According to the analysis,this method has a good defensive effect to SYN Flood attack.

关 键 词：SYN FLOOD攻击 三次握手 超时重发 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]