Paper Abstract and Keywords |
Presentation |
2015-12-18 16:00
A method of defending against SYN flood by limiting SYN packet using token bucket model Ikebuchi Ryoma, Kobayashi Takashi (Kansai Univ.) IN2015-94 |
Abstract |
(in Japanese) |
(See Japanese page) |
(in English) |
A SYN flood is a kind of Denial-of-service (DoS) attack which abuses TCP server's behavior. SYN cookies have been used for protecting TCP servers from SYN flood. In this article, I overview how a SYN flood achieves and tactic of SYN cookies, and then I confirm the condition of achievement of SYN flood on Linux. Finally, I suggest a system that can defend a Linux server against SYN flood using token bucket filtering instead of SYN cookies. |
Keyword |
(in Japanese) |
(See Japanese page) |
(in English) |
TCP / DoS attack / SYN flood / SYN cookies / token bucket model / / / |
Reference Info. |
IEICE Tech. Rep., vol. 115, no. 370, IN2015-94, pp. 137-141, Dec. 2015. |
Paper # |
IN2015-94 |
Date of Issue |
2015-12-10 (IN) |
ISSN |
Print edition: ISSN 0913-5685 Online edition: ISSN 2432-6380 |
Copyright and reproduction |
All rights are reserved and no part of this publication may be reproduced or transmitted in any form or by any means, electronic or mechanical, including photocopy, recording, or any information storage and retrieval system, without permission in writing from the publisher. Notwithstanding, instructors are permitted to photocopy isolated articles for noncommercial classroom use without fee. (License No.: 10GA0019/12GB0052/13GB0056/17GB0034/18GB0034) |
Download PDF |
IN2015-94 |
Conference Information |
Committee |
IN IA |
Conference Date |
2015-12-17 - 2015-12-18 |
Place (in Japanese) |
(See Japanese page) |
Place (in English) |
Hiroshima City University |
Topics (in Japanese) |
(See Japanese page) |
Topics (in English) |
Performance Analysis and Simulation, Robustness, Traffic and Throughput Measurement, Quality of Service (QoS) Control, Congestion Control, Overlay Network/P2P, IPv6, Multicast, Routing, DDoS, etc. |
Paper Information |
Registration To |
IN |
Conference Code |
2015-12-IN-IA |
Language |
Japanese |
Title (in Japanese) |
(See Japanese page) |
Sub Title (in Japanese) |
(See Japanese page) |
Title (in English) |
A method of defending against SYN flood by limiting SYN packet using token bucket model |
Sub Title (in English) |
|
Keyword(1) |
TCP |
Keyword(2) |
DoS attack |
Keyword(3) |
SYN flood |
Keyword(4) |
SYN cookies |
Keyword(5) |
token bucket model |
Keyword(6) |
|
Keyword(7) |
|
Keyword(8) |
|
1st Author's Name |
Ikebuchi Ryoma |
1st Author's Affiliation |
Kansai University Graduate School (Kansai Univ.) |
2nd Author's Name |
Kobayashi Takashi |
2nd Author's Affiliation |
Kansai University (Kansai Univ.) |
3rd Author's Name |
|
3rd Author's Affiliation |
() |
4th Author's Name |
|
4th Author's Affiliation |
() |
5th Author's Name |
|
5th Author's Affiliation |
() |
6th Author's Name |
|
6th Author's Affiliation |
() |
7th Author's Name |
|
7th Author's Affiliation |
() |
8th Author's Name |
|
8th Author's Affiliation |
() |
9th Author's Name |
|
9th Author's Affiliation |
() |
10th Author's Name |
|
10th Author's Affiliation |
() |
11th Author's Name |
|
11th Author's Affiliation |
() |
12th Author's Name |
|
12th Author's Affiliation |
() |
13th Author's Name |
|
13th Author's Affiliation |
() |
14th Author's Name |
|
14th Author's Affiliation |
() |
15th Author's Name |
|
15th Author's Affiliation |
() |
16th Author's Name |
|
16th Author's Affiliation |
() |
17th Author's Name |
|
17th Author's Affiliation |
() |
18th Author's Name |
|
18th Author's Affiliation |
() |
19th Author's Name |
|
19th Author's Affiliation |
() |
20th Author's Name |
|
20th Author's Affiliation |
() |
Speaker |
Author-1 |
Date Time |
2015-12-18 16:00:00 |
Presentation Time |
25 minutes |
Registration for |
IN |
Paper # |
IN2015-94 |
Volume (vol) |
vol.115 |
Number (no) |
no.370 |
Page |
pp.137-141 |
#Pages |
5 |
Date of Issue |
2015-12-10 (IN) |
|