Enhanced efficient SYN spoofing detection and mitigation scheme for DDoS attacks. (2018)

• Record Type: Journal Article
• Authors: Kavisankar, L.; Chellappan, C.; Venkatesan, S.; Sivasankar, P.
• Is Part Of: International journal of internet technology and secured transactions. Volume 8:Number 4(2018)
• Page Start: 583
• Page End: 600
• Publication Date: 2018
• Subjects: distributed denial of service -- DDoS -- efficient spoofed mitigation scheme -- ESMS -- IP spoofing -- SYN spoofing -- TCP SYN flooding -- trust value; Internet -- Security measures -- Periodicals; Computer security -- Periodicals; Information systems management -- Security measures -- Periodicals; Computer networks -- Security measures -- Periodicals; Information technology -- Security measures -- Periodicals; 005.805
• Languages: English
• ISSNs: 1748-569X

Abstract

Protection of critical server from cyber attacks is vital, especially in the case of active attacks like distributed denial of service (DDoS). Generally, denial of service (DoS) is an action that prevents or impairs the authorized use of networks, systems or applications by exhausting the resources, such as central processing units (CPU), memory, bandwidth and disk space. The job of the security professionals becomes complex, when the attacks are launched from trusted IP addresses, using synchronization (SYN) spoofing. The work presented in this paper is experimented with efficient spoofed mitigation scheme (ESMS) which uses the TCP probing method along with the bloom filter trust model. The experiment is carried out in both IPv4 and IPv6 environment in the smart and secure environment (SSE) real time test bed and the proposed scheme provides accurate and robust information for the detection and controlling of the spoofed packets during the DDoS attacks.