SYN Flood attack protection method and device, electronic equipment and storage medium

Abstract

The embodiment of the invention relates to an SYN Flood attack protection method and device, electronic equipment and a storage medium, and the method comprises the steps: counting a first cumulative requested connection amount of a target server in a current protection period when an SYN message for requesting the connection of the target server is received and if the target server is determined to be subjected to the SYN Flood attack; determining a target authentication mode based on the first accumulated requested connection quantity so as to authenticate a client corresponding to the SYN message by adopting the target authentication mode; if the authentication result shows that the client is an illegal client, discarding the SYN message; if the authentication result shows that the client is a legal client, releasing the SYN message. Therefore, while the authentication accuracy is ensured, the protection pressure can be reduced, the downlink network congestion is avoided, the influence on the service quality of normal services is further avoided, and the user requirements are comprehensively met.

Description

technical field [0001] The embodiments of the present invention relate to the field of computer technology, and in particular to a method, device, electronic equipment and storage medium for protecting against SYN Flood attacks. Background technique [0002] SYN Flood attack is currently one of the most popular methods of DDoS (Distributed Denial of Service attack, distributed denial of service attack). Connection request, so that the resources of the attacked party are exhausted (for example, the CPU is fully loaded or the memory is insufficient). [0003] At present, in order to defend against SYN Flood attacks, a DDoS protection system can be deployed between the client and the server. The SYN packet sent by the client to the server first reaches the DDoS protection system. The client of the SYN message is authenticated. If the authentication result indicates that the client is invalid, the SYN message will be discarded. If the authentication result indicates that the cl...

AI Technical Summary

Problems solved by technology

[0005] In view of this, in order to solve the technical problem that the SYN Flood attack protection scheme in the prior art is relatively simple and cannot fully meet the needs of users, the embodiment of the present invention provides a SYN Flood attack protection method, device, electronic equipment and storage medium

Images