Detection SYN Flooding Attacks Using Fuzzy Logic

Denial of Service attacks are one of the major type of problems in the computer network security. Because they include many other type of attacks they are one of the most frequently used attack methods.. In general, DoS attacks are used to block access to the computer networks or personal computers. SYN flooding attack is the most widespread of the DoS attacks. In these attacks normal SYN packets can not be distinguished from the SYN attack packets. In this paper, we propose a fuzzy logic based system for detecting SYN flooding attacks. Performance of the proposed system has been compared with Cumulative Sum (CUSUM) algorithm. The simulation results show that the proposed system has better performance for low and high intensity attacks than the CUSUM algorithm.

1. Introduction

The rapid growth and the increasing usage of the internet make the computer security a major research subject [1]. The service providers and companies might face serious problems if the security measures they take are inadequate. Over the past decade even the major companies such as yahoo and e-bay were exposed to several DoS attacks [1]. As a result web services provided by these companies were temporarily became unavailable which in turn caused financial losses.