Title :
Performance comparison of defense mechanisms against TCP SYN flood DDoS attack
Author :
Kolahi, Samad S. ; Alghalbi, Amro A. ; Alotaibi, Abdulmohsen F. ; Ahmed, S. Shahnawaz ; Lad, Divyesh
Author_Institution :
Unitec Inst. of Technol., Auckland, New Zealand
Abstract :
The TCP SYN DDoS attack and defense prevention mechanisms is studied. Each prevention mechanism has some exclusive pros and cons over the others. In this paper, we have compared various defence mechanisms for preventing potential TCP SYN DDoS attacks. Router based TCP Intercept is found to provide the best defense while Anti DDoS Guardian gave the worst defese.
Keywords :
Internet; computer network security; routing protocols; transport protocols; TCP SYN flood DDoS attack prevention; anti-DDoS guardian; defense prevention mechanisms; router based TCP intercept; Bandwidth; Computer crime; Computers; Floods; IP networks; Limiting; Servers; DDoS; DDoS defenses; TCP SYN Flood attack;
Conference_Titel :
Ultra Modern Telecommunications and Control Systems and Workshops (ICUMT), 2014 6th International Congress on
Conference_Location :
St. Petersburg
DOI :
10.1109/ICUMT.2014.7002093
