DocumentCode
2122916
Title
Comparison of operating system implementations of SYN flood defenses (Cookies)
Author
Smith, Craig ; Matrawy, Ashraf
Author_Institution
Carleton Univ., Ottawa, ON
fYear
2008
fDate
24-26 June 2008
Firstpage
243
Lastpage
246
Abstract
In this paper, we report on our comparison of the operating system implementation of the most common defense against SYN flood attacks, that is SYN cookies. We show, through experimentation, the differences in the performance of these different implementations. We also analyze that performance and propose a modification to the Linux implementation that should alleviate an implementation bottleneck. We implemented the modification and report the results at the end of this paper.
Keywords
Linux; operating systems (computers); security of data; Linux; SYN cookies; SYN flood attacks; SYN flood defenses; operating system implementations; Computer crashes; Computer crime; Floods; Heart; Linux; Operating systems; Performance analysis; Protection; Resource management; Systems engineering and theory;
fLanguage
English
Publisher
ieee
Conference_Titel
Communications, 2008 24th Biennial Symposium on
Conference_Location
Kingston, ON
Print_ISBN
978-1-4244-1945-6
Electronic_ISBN
978-1-4244-1946-3
Type
conf
DOI
10.1109/BSC.2008.4563248
Filename
4563248
Link To Document