基于.NET平台的SYN Flood攻击测试的实现  

Implementation of SYN Flood attack testing based on. NET framework

作　　者：夏春涛[1] 杜学绘[1] 郝耀辉[1] 王婷[1] 

机构地区：[1]解放军信息工程大学电子技术学院,河南郑州450004

出　　处：《计算机工程与设计》2011年第6期1918-1921,共4页Computer Engineering and Design

基　　金：国家863高技术研究发展计划基金项目(2009AA01Z438)

摘　　要：为解决SYN Flood攻击测试问题,基于.NET平台设计实现了一个SYNFlood攻击测试软件。分析了TCP协议建立连接的三次握手过程,探讨了SYNFlood攻击的原理。在分析TCP/IP报文格式的基础上,采用C#语言定义了报文首部结构,给出了计算校验和的方法。基于微软.NET平台利用RawSocket技术,实现了原始TCP/IP协议报文的生成和发送,进而开发了SYN Flood攻击测试软件SynSender。利用SynSender完成了多种情形下的实验,并对实验结果进行了分析,实验结果表明了SynSender进行SYN Flood攻击测试的有效性。To deal with SYN Flood attack testing, the software of SYN Flood attack testing is designed and implemented based on NET Framework. Firstly, the three-way handshake of TCP establishing connection is analyzed, the theory of SYN Flood attack is discussed. Secondly, the format ofTCP/IP datagram is analyzed, and the datagram header structure is defined, the algorithm of computing checksum is provided by CSharp language. Then, the raw TCP/IP packets creating and sending is implemented by RawSocket technology based on Microsoft .NET framework, SynSender, the software of SYN Flood attack testing is developed. Finally, experiments in various situations are accomplished by SynSender, and the experimental results validate the effectiveness of SynSender executing SYN Flood attack testing.

关 键 词：NET平台 SYN洪流 IP欺骗 原始套接字 攻击测试 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]