Active Network Based SYN-FLOOD Defense

This paper outlines the limitation of some currently schemes of defending SYN-Flood in traditional networks, and presents an active network based SYN-Flood defense mechanism, which takes advantage of the active network's dynamic environment. In additon, we analyze the performance of our scheme via simulation experiments and compare it with the firewall based mechanism. The experiments show that active network based mechanism provides better capability for SYN-Flood defending.