基于Internet的TCP会话劫持欺骗攻击与防御策略

TCP session hijacking spoofing attack and defense strategy based on Internet

随着网络技术的飞速发展和各种应用的出现,网络安全问题成为各种网络应用需要考虑的头等大事,在各种欺骗攻击中,如何防止TCP会话劫持欺骗攻击成为防御网络入侵的重点之一。文中阐述了TCP会话劫持的概念,目的是对其产生的原理和造成的危害进行分析,采用实例分析方法,通过对攻击者进行一次会话劫持攻击过程的探讨,得到目前针对会话劫持攻击无法从根本上阻止或消除的结论,进一步提出了针对性相应防御策略的结果,减少攻击的发生。

With the rapid development of network technology and the emergence of various applications,the network security has become a top priority for various network applications.In various spoofing attacks,how to prevent TCP session hijacking spoofing attack becomes one of the focuses of the defense against network intrusion.The concept of TCP session hijacking is expounded,so as to analyze the principle it generates and the harm it causes.The discussion of a session hijacking attack process of the attacker is performed by means of the instance analysis method,so that the conclusion that the session hijacking attacks cannot be prevented or eliminated fundamentally is obtained.Furthermore,the corresponding defense strategies are put forward to reduce the attacks′occurrence.