Detecting SYN flood attack with snort ids through signature-based detection and its impact on network performance

Abdo Dargan, Abdo Saif (2023) Detecting SYN flood attack with snort ids through signature-based detection and its impact on network performance. Project Report. Universiti Teknikal Malaysia Melaka, Melaka, Malaysia. (Submitted)

Text (Full Text) Detecting SYN flood attack with snort ids through signature-based detection and its impact on network performance.pdf Download (3MB)

Abstract

This project is known as Detecting SYN Flood Attack with Snort IDS Through Signature-Based Detection and Its Impact on Network Performance. As reported by cybersecurity news, the SYN flood attack has been one of the top 10 attacks in 2022. this project intends to Provide insight for network security practitioners in developing more robust and effective network security mechanisms that can detect and prevent SYN flood attacks, ensuring the stability and availability of network services. In this research, multiple tools have been used to serve the purpose of the research; the tools are hping3 in the Kali Linux to imitate the SYN flood attack, and the SNORT IDS was used to detect the presence of SYN flood attack in the network. Lastly, Wireshark has been used to analyze the impact of the SYN flood attack on the network performance. The primary purpose of this research is To detect the SYN flood attacks using Snort IDS signature-based detection, to analyze the impact of the SYN flood attack on the network performance, and to study the effectiveness of this approach in detecting the attack and analyzing the impact on network performance order to major the successfulness of the proposed research few matric measurements have been taking to consideration such as throughput, latency, package loss and bandwidth consumption.

Actions (login required)

View Item