NEMESI:Using a TCP Finite State Machine against TCP SYN Flooding Attacks

Over the last few years the Internet has seen a continuous rise of malicious traffic. These include the Denial of Service (DoS) attacks, viruses, Trojans, spam mails and worm attacks. In this paper we focus on experiments with TCP SYN flooding attacks. We introduce a new approach to prevent such attacks based on passive monitoring of the frequency of TCP SYN packets and peak intervals, with respect to other packets, in combination with a dynamically adapted connection drop