Stochastic Model of TCP SYN Attacks Stochastinis TCP SYN atak modelis

A great proportion of essential services are moving into internet space making the threat of DoS attacks even more actual. To estimate the real risk of some kind of denial of service (DoS) attack in real world is difficult, but mathematical and software models make this task easier. In this paper we overview the ways of implementing DoS attack models and offer a stochastic model of SYN flooding attack. It allows evaluating the potential threat of SYN flooding attacks, taking into account both the legitimate system flow as well as the possible attack power. At the same time we can assess the effect of such parameters as buffer capacity, open connection storage in the buffer or filte-ring efficiency on the success of different SYN flooding attacks. This model can be used for other type of memory depletion denial of service attacks. Article in Lithuanian Vis didesn dalis svarbi paslaug persikelia internetin erdv , tod l did ja ir DoS atak potenciali gr sm . io tipo atak gr sm s vertinimui realiai sud tinga i bandyti galimai vyksian ias atakas, bet papras iau tai vertinti gali pad ti DoS atak matematiniai / programiniai modeliai. iame darbe ap velgiami egzistuojantys TCP SYN tipo atak modeliai bei siūlomas stochastinis modelis TCP SYN atakoms modeliuoti. Jis leid ia atsi velgi teis t sistemos sraut , galim atakos galingum , aukos naudojam apsaug savybes ir gali būti naudojamas ne tik TCP SYN, bet ir kitoms atminties i naudojimo DoS atakoms modeliuoti. Straipsnis lietuvi kalba