ARD: A robust prevention technique for SYN flood attack

SYN flood is a well-known DoS attack which uses TCP three way handshake’s weakness toconsume victim’s resources and makes it out of service for legitimate users. Most of proposedsolutions are just detection approaches. Even those claim that are prevention approaches areactually just defense approaches and act after attack’s occurrence. SYN cookie is one of thosewho claim as a prevention method. But due to SYN cookie drawbacks even in SYN cookiepresence an attacker can mount attack yet. This paper proposes an improved SYN cookietechnique called Automatic Reverse DoS (ARD) which is a real prevention solution. TheARD faces attacker botnets to DoS attack themselves and in fact disarms attacker, so attackercan’t mount attack. The proposed idea simulated by OPNET and different parameters ofvictim server is surveyed. The simulation results prove ARD accuracy and its power inprevention of server against SYN flood attack.

کلیدواژه ها:

Network Security ، SYN flood attack ، SYN flood prevention ، DoS prevention ، DoS ، DDoS ، Automatic Reverse DoS INTRODUCTION