SSL协议拒绝服务攻击及其对策研究

Research of SSL Protocol DoS Attack and Defense Strategy

SSL协议是电子商务中常用的一种安全电子交易协议,对信息传输起到了加密和认证的作用。该文针对最新的SSL服务器DoS工具,分析了SSL协议存在的拒绝服务漏洞,讨论了建立一个SSL连接服务端所消耗计算资源远多于客户端的原因,并提出了几种解决方案,以缓解攻击带来的危害,其中基于连接限制的解决方案可有效缓解此类问题。

SSL protocol can be used to encrypt data and authenticate identity.According to the SSL Serrers DoS attack tools,this paper gives a analyzation to the DoS vulnerabality of the SSL protocol and discussed why establishing a secure SSL connection requires much more processing power on the server than on the client.then puts forward several solutions to Mitigate.The solution based on connection limit can mitigate the problem effectively