PPPoE协议的安全隐患及解决方案

The security leak and its solution in PPPoE

对当前接入ADSL宽带网的PPPoE协议进行了分析 ,发现该协议容易遭受D .o .S拒绝服务攻击和伪装访问集中器攻击 ,在分析造成这两种攻击的主要原因基础上 ,提出了防止攻击的解决方案及原理 ,并给出了具体解决办法 .通过在PPPoE协议的发现阶段的四个包中增加必要的TAG ,对PPPoE协议进行了改进 ,弥补了PPPoE协议在理论上的漏洞 。

PPP over Ethernet Protocol used to access ADSL broadband network was analyzed. It was found that this protocol was easily attacked by D.o.S. (Denial of Service) and disguised Access Concentrator. After analyzing the major reasons of these attack, the paper provided a solution. By adding some necessary TAGs into the four packets in the stage of DISCORY, PPPoE protocol was improved and its security enhanced. The paper makes up to the PPPoE protocol for the leak of securiey on theory, and its resolving method can be achieved.