SYN Flood Defense in Programmable Data Planes

Abstract

The SYN flood attack is a common attack strategy as part of Distributed Denial-of-Service, which steadily becomes more frequent and of higher volume. To defend against SYN floods, preventing valuable service downtime, malicious traffic has to be separated from legitimate TCP requests. For this challenge, sophisticated filtering mechanisms operating at high bandwidths are needed.