一种认证协议防御拒绝服务攻击的设计方法

A New Countermeasure for Protecting Authentication Protocols against Denial of Service Attack

拒绝服务 (DoS)攻击是一种阻碍授权用户正常获得服务的主动攻击 ,大量认证协议和密钥建立协议存在着不同程度的DoS隐患 .本文提出一种新的解决方法 ,用于无可信第三方认证协议和密钥建立协议防御DoS攻击 ,该方法可动态调整DoS防御的强度 ,并可减少并行会话攻击 ,增强协议的安全性 .

Denial of service has become a major security threat in open communications networks.Authentication and key establishment protocols usually are vulnerable to network DoS attacks.This paper presents a new countermeasure to make authentication protocols without trusted third party resistant against DoS attack.By using this method,the strength of resistance can be adjusted dynamically and most parallel session attacks can be prevented.