Trace and Locate SYN Attack Source and Security Defense

Based on the principle and characters of SYN attack, the paper puts forward the model STLM/R especially for tracing and locating SYN attack source and security defense, and formulates the model's structure and function. Based on the model, we particularly research the process of detecting and tracing SYN attack source, and provide an algorithm for locating attack nodes. We can exactly trace the router node of attack source, and find the attack computer nodes through these methods of tracing and locating. Using the improved method, which is based on triple format and symmetrical filtering, to filter illegal packets, we can perform the aim of security defense.