【作者】 赵榛； 刘桂； 鲍飞； 刘克钧；

【Author】 Zhen Zhao, Gui Liu, Fei Bao and Kejun Liu (Information Science and Technology School at Sun Yat-Sen University, guanzhou 510410)

【机构】 中山大学信息科学与技术学院；

【摘要】 传统的TCP协议的三路握手存在安全漏洞。这种漏洞使系统可能受到SYN洪水攻击而导致堆栈溢出,连接中断。为此,我们提出一种改进的三路握手的方案。新方案利用单向函数和截断函数避免了TCP协议在三路握手完成前建立堆栈,从而成功防止了SYN flooding攻击。更多还原

【Abstract】 There is a leak of security in the current TCP implement. As a result, the stack may be overflowed by SYN flooding attack, which will cause the connection break off. In this paper, we propose a new improved TCP scheme. By using one-way hash function and truncation function, the novel method avoid building TCP stack before finishing three-way handshaking, which prevents TCP from SYN flooding attack.更多还原