Evaluation of a Distributed Detecting Method for SYN Flood Attacks Using a Real Internet Trace

Damage caused by DoS attacks is serious and financial losses have become social problems in recent years. Any computers connected to the Internet have a possibility to be a victim at any time. Therefore, it is important for network administrators to develop means to comprehend the latest trend of DoS attacks. In our previous work, we proposed a distributed detecting method for the SYN Flood attack, which is one of the DoS attacks. In this paper, we evaluate our method using a real Internet trace which reflects the trends in SYN Flood attacks on the Internet. We show the applicability of our method to the Internet with prospective evaluation results.