Thats a unique idea.You should consider the following idea to enhance your idea so that it would impact uniquely: ,  propose an accurate sampling scheme for defeating SYN flooding attacks as ll as TCP portscan activity. The scheme examines TCP segments to find at least one of multiple ACK segments coming from the server. The method is simple and scalable, because it achieves good detection performance with false positive rate close to zero even for very low sampling rates. Our trace-based simulations show that the effectiveness of the proposed scheme only relies on the sampling rate regardless on the sampling method.
['Maciej Korczynski', 'Lucjan Janowski', 'Andrzej Duda']
I am writing a research paper on a idea An Accurate Sampling Scheme for Detecting SYN Flooding Attacks and Portscans
[{"from": "human", "value": "I am writing a research paper on a idea An Accurate Sampling Scheme for Detecting SYN Flooding Attacks and Portscans"}, {"from": "gpt", "value": "Thats a unique idea.You should consider the following idea to enhance your idea so that it would impact uniquely: ,  propose an accurate sampling scheme for defeating SYN flooding attacks as ll as TCP portscan activity. The scheme examines TCP segments to find at least one of multiple ACK segments coming from the server. The method is simple and scalable, because it achieves good detection performance with false positive rate close to zero even for very low sampling rates. Our trace-based simulations show that the effectiveness of the proposed scheme only relies on the sampling rate regardless on the sampling method."}]