Title :
Comparison of operating system implementations of SYN flood defenses (Cookies)
Author :
Smith, Craig ; Matrawy, Ashraf
Author_Institution :
Carleton Univ., Ottawa, ON
Abstract :
In this paper, we report on our comparison of the operating system implementation of the most common defense against SYN flood attacks, that is SYN cookies. We show, through experimentation, the differences in the performance of these different implementations. We also analyze that performance and propose a modification to the Linux implementation that should alleviate an implementation bottleneck. We implemented the modification and report the results at the end of this paper.
Keywords :
Linux; operating systems (computers); security of data; Linux; SYN cookies; SYN flood attacks; SYN flood defenses; operating system implementations; Computer crashes; Computer crime; Floods; Heart; Linux; Operating systems; Performance analysis; Protection; Resource management; Systems engineering and theory;
Conference_Titel :
Communications, 2008 24th Biennial Symposium on
Conference_Location :
Kingston, ON
Print_ISBN :
978-1-4244-1945-6
Electronic_ISBN :
978-1-4244-1946-3
DOI :
10.1109/BSC.2008.4563248
