International Journal of
Physical Sciences

  • Abbreviation: Int. J. Phys. Sci.
  • Language: English
  • ISSN: 1992-1950
  • DOI: 10.5897/IJPS
  • Start Year: 2006
  • Published Articles: 2557

Full Length Research Paper

Self-managing defense against SYN-flooding attacks

Gholam Shaker1* and Shahram Jamali2        
1Department of Computer Engineering, Zanjan Branch, Islamic Azad University, Zanjan, Iran. 2Department of Computer Engineering, University of Mohaghegh Ardabili, Ardabil, Iran.
Email: [email protected]

  •  Accepted: 25 July 2011
  •  Published: 16 September 2011


SYN-flooding attack uses the weakness available in TCP’s three-way handshake process to keep it from handling legitimate requests. This attack causes the victim host to populate its backlog queue with forged TCP connections. In other words it increases PSA (probability of success of attack) and decreases BUE (buffer utilization efficiency) in the victim host and results to decreased performance of the host. This paper proposes a self-managing approach, in which the host defends against SYN-flooding attack by dynamically tuning off its own two parameters, that is, m (maximum number of half-open connections) and h (hold time for each half-open connection). In this way, it formulates the defense problem, an optimization problem and then employs the particle swarm optimization (PSO) algorithm to solve it. The simulation results show that the proposed defense strategy improves performance of the under attack system in terms of BUE and PSA.


Key words: SYN-flooding, PSO, DoS, TCP, queuing model.