資源描述：
《hop integrity in computer networks》由會(huì)員上傳分享，免費(fèi)在線閱讀，更多相關(guān)內(nèi)容在教育資源-天天文庫(kù)。
1、*HopIntegrityinComputerNetworks?M.G.GoudaE.N.ElnozahyC.-T.HuangT.M.McGuire?DepartmentofComputerSciencesIBMAustinResearchLabTheUniversityofTexasatAustin11400BurnetRd,M/S9460Austin,TX78712-1188Austin,TX78758{gouda,chuang,mcguire}@cs.utexas.edumootaz@us.ibm.comAbstracti.SmurfAttack:InanIPnetwork,any
2、computercansenda“ping”Acomputernetworkissaidtoprovidehopintegrityiffmessagetoanyothercomputerwhichrepliesbysendingwhenanyrouterpinthenetworkreceivesamessagembacka“pong”messagetothefirstcomputerasrequiredsupposedlyfromanadjacentrouterq,thenpcancheckbyInternetControlMessageProtocol(orICMP,forshort)
3、thatmwasindeedsentbyq,wasnotmodifiedafteritwas[14].Theultimatedestinationinthepongmessageisthesent,andwasnotareplayofanoldmessagesentfromqsameastheoriginalsourceinthepingmessage.Antop.Inthispaper,wedescribethreeprotocolsthatcanadversarycanutilizethesemessagestoattackacomputerbeaddedtotheroutersin
4、acomputernetworksothatthedinsuchanetworkasfollows.First,theadversaryinsertsnetworkcanprovidehopintegrity.Thesethreeprotocolsintothenetworkapingmessagewhoseoriginalsourceisareasecretexchangeprotocol,aweakintegrityprotocol,computerdandwhoseultimatedestinationisamulticastandastrongintegrityprotocol.
5、Allthreeprotocolsareaddressforeverycomputerinthenetwork.Second,astateless,requiresmalloverhead,anddonotconstraincopyoftheinsertedpingmessageissenttoeverythenetworkprotocolintheroutersinanyway.computerinthenetwork.Third,everycomputerinthenetworkrepliestoitspingmessagebysendingapongmessagetocompute
6、rd.Thus,computerdisfloodedby1.Introductionpongmessagesthatitdidnotrequested.ii.SYNAttack:MostcomputernetworkssufferfromthefollowingToestablishaTCPconnectionbetweentwocomputerssecurityproblem:inatypicalnetwork,anadversary,thatcandd,oneofthetwocomputerscsendsa“SYN”hasanaccesstothenetwork,caninsertn
7、ewmessages,messagetotheothercomputerd.Whendreceivesthemodifycurrentmessages,orreplayoldmessagesintheSYNmessage,itreservessomeofitsresourcesforthenetwork.Inmanycases,theinserted,modified,orexpectedconnectionandsendsa“SY
