Detecting the DDoS attacks based on SYN proxy and Hop-Count Filter

Abstract

This paper analyzes the principles of SYN proxy, proposes the two upgrade algorithms of SYN proxy, and gives the ideas for combining the hop-count information filter to defense DDoS, introduces the detecting method of DDoS attacks based on SYN proxy integrated the hop count filter. The test result expresses that this method may detect and defense DDos attack in heavy traffic.