針對目前傳統(tǒng)網(wǎng)防御TCP同步泛濫攻擊的服務(wù)器主機、路由器過濾、防火墻方法的局限性，利用主動網(wǎng)的動態(tài)特性，提出一種基于主動網(wǎng)的同步泛濫防御機制，并通過仿真實驗將它與傳統(tǒng)網(wǎng)環(huán)境下的防火墻防御進行了性能比較和分析，結(jié)果表明主動網(wǎng)技術(shù)為同步泛濫攻擊提供了良好的防御性能。
關(guān) 鍵 詞 同步泛濫攻擊; 防御; 防火墻; 主動網(wǎng)

Abstract This paper outlines the limitation of some currently schemes of defending SYN-Flood in traditional networks, and presents an active network based SYN-Flood defense mechanism, which takes advantage of the active network’s dynamic environment. In additon, we analyze the performance of our scheme via simulation experiments and compare it with the firewall based mechanism . The experiments show that active network based mechanism provides better capability for SYN-Flood defending.
Key words SYN-Flood attack; defense; firewall; active network