基于Internet的TCP会话劫持欺骗攻击与防御策略  

TCP session hijacking spoofing attack and defense strategy based on Internet

作　　者：赵景 王浉锟 ZHAO Jing;WANG Shikun(Xuchang Research Center of Computer Engineering Technology,Xuchang 461000,China;Department of Chemical Engineering,Tsinghua University,Beijing 100084,China)

机构地区：[1]许昌市计算机应用工程技术研究中心,河南许昌461000 [2]清华大学化工系,北京100084

出　　处：《现代电子技术》2020年第16期122-125,共4页Modern Electronics Technique

基　　金：河南省高等教育教学改革研究与实践项目(2017SJGLX614)。

摘　　要：随着网络技术的飞速发展和各种应用的出现,网络安全问题成为各种网络应用需要考虑的头等大事,在各种欺骗攻击中,如何防止TCP会话劫持欺骗攻击成为防御网络入侵的重点之一。文中阐述了TCP会话劫持的概念,目的是对其产生的原理和造成的危害进行分析,采用实例分析方法,通过对攻击者进行一次会话劫持攻击过程的探讨,得到目前针对会话劫持攻击无法从根本上阻止或消除的结论,进一步提出了针对性相应防御策略的结果,减少攻击的发生。With the rapid development of network technology and the emergence of various applications,the network security has become a top priority for various network applications.In various spoofing attacks,how to prevent TCP session hijacking spoofing attack becomes one of the focuses of the defense against network intrusion.The concept of TCP session hijacking is expounded,so as to analyze the principle it generates and the harm it causes.The discussion of a session hijacking attack process of the attacker is performed by means of the instance analysis method,so that the conclusion that the session hijacking attacks cannot be prevented or eliminated fundamentally is obtained.Furthermore,the corresponding defense strategies are put forward to reduce the attacks′occurrence.

关 键 词：防御策略 TCP会话劫持 欺骗攻击 原理分析 危害分析 网络安全 

分 类 号：TN915-34[电子电信—通信与信息系统] TP393.08[电子电信—信息与通信工程]