To defeat the attacks, the stateful inspection is switched from normal mode to emergency mode by the staged switch method and packets that donnot belong to a normal TCP session are dropped.

• 防御算法根据检测结果切换状态检测的工作模式，丢弃不属于完整TCP链接的数据包，实现对DoS攻击的防御。