Question
What is SYN flood attack and how is it detected?
Asked by: USER3837
48 Viewed
48 Answers
Answer (48)
A SYN flood attack exploits the TCP handshake process. Attackers send a flood of SYN (synchronization) packets without completing the handshake, leaving the server's connection queue full. Detection involves monitoring for a large number of SYN packets without corresponding ACK (acknowledgment) packets. Mitigation includes SYN cookies and SYN proxies.