摘要： 介绍了目前防范ＳＹＮ／Ｆｌｏｏｄｉｎｇ网络攻击的几种典型的方法，在模拟高速交换网络的环境下实施了ＳＹＮ／Ｆｌｏｏｄｉｎｇ网络攻击的实验，通过对网络带宽和系统遭受攻击的影响的分析和比较实验结果，指出现有系统的不足，并提出了一种适用于高强度ＳＹＮ／Ｆｌｏｏｄｉｎｇ攻击的自适应ｃｏｏｋｉｅｓ防范模型，在Ｌｉｎｕｘ系统中实现了该模型，实验结果表明该模型能抵抗高强度的ＳＹＮ／Ｆｌｏｏｄｉｎｇ攻击，优于传统的防范策略。
关键词:
SYN/Flooding,
黑客,
防火墙,
SYN-cookies,
backlog队列
Abstract: This paper introduced several defending approaches available currently, by analyzing the band of network and comparing the experiment results, we proofed the limitation of defending method of current policy,and provided a new model dealing with SYN/Flooding attacking, self-adaptation cookies.We implemented self-adaptation cookies in Linux kernel, the experiment showed that self-adaptation is more effective than traditional defending policy.
中图分类号:
胡伟栋,汪为农. 一种SYN/Flooding攻击的对策[J]. , 2001, 27(08): 112-115.
HU Weidong， WANG Weinong. An Approach to SYN/Flooding Attacking[J]. , 2001, 27(08): 112-115.