An Efficient High-Throughput and Low-Latency SYN Flood Defender for High-Speed Networks

Algorithm 1

SYN flood attack detection.

Input: TCP_flag

Parameter: ACK_DIFF, INTERVAL and SYN_PKT

Output: SYNFlood

1  ; // the number of SYN packets

2  ; // the number of ACK packets

3  ; // Interval

4  while true  do

5if  incoming packet  then

6if  TCP_flag = SYN_flag  then

7;

8if  TCP_flag = ACK_flag  then

9;

10if    INTERVAL  then

11;

12if   (  SYN_PKT) (ACK_DIFF)   then

13SYNFlood = true;  // attacks exist

14else

15SYNFlood = false;  // attacks do not exist

16;

17;

18else

19;

20  return  SYNFlood