摘要： 提出了对现有SYNCache/Cookie的改进方法,针对Cache的哈希表的弱安全性引入了变换矩阵TM,使得攻击者预选的套接字对不会产生哈希冲突。针对Cookie携带的选项信息少、算法复杂效率低,引入了简洁有效的TM和S盒代换,以生成可以验证携带较多选项信息的ISNs。最后,依据攻击状态的不同,整合了SYNCache/Cookie,以便更好地抵御SYNFlood拒绝服务攻击。

关键词: SYN Cache, SYN Cookie, 哈希算法, 变换矩阵

Abstract: This paper presents an improved scheme on SYN cache/cookie available.For the weak security of hash table,it introduces the transform matrix(TM) to make these sockets attacker pre-selecting can’t produce hash collisions.For the less option messages cookie taking,and complicate algorithm,low in efficiency,it provides a TM and s-box substitution approach which is concise and efficient to generate the ISNs taking more messages that can be verified.In the end,it integrates SYN cache and SYN cookie in terms of different attack cases to defend against SYN flood DoS effectively.

中图分类号: 

• TP393.08