Flood Attacks

Countermeasures for SYN flood attacks There is no single countermeasure to protect against SYN flood attacks. However, there are certain steps that can be followed to minimize the risk of damage caused by such attacks. One countermeasure to SYN flood attacks is reducing the duration of time required for a ‘timed out’ of a connection, to take place. If a large number of connection requests are sent to a target system, then the spoofed requests …

…The router acts as a transparent TCP proxy between the real server, and the client. When a connection request is made, the router completes the handshake for the server, and opens the real connection only after the handshake is completed. The router also places a threshold on the amount of connection requests it handles. If the amount of half-open connections exceeded the threshold it lowers the timeout period interval, thus dropping the half-open connections faster.