syn攻击原理以及防范技术【免费版】（Syn attack principle and prevention technology [Free Edition]）.doc

下载文档 降价啦

8
0
约1.84万字
约 15页
2017-09-07 发布于河南
举报
版权申诉
保障服务

syn攻击原理以及防范技术【免费版】（Syn attack principle and prevention technology [Free Edition]）.doc

1、本文档共15页，可阅读全部内容。
2、原创力文档（book118）网站文档一经付费（服务费），不意味着购买了该文档的版权，仅供个人/单位学习、研究之用，不得用于商业用途，未经授权，严禁复制、发行、汇编、翻译或者网络传播等，侵权必究。
3、本站所有内容均由合作方或网友上传，本站不对文档的完整性、权威性及其观点立场正确性做任何保证或承诺！文档内容仅供研究参考，付费前请自行鉴别。如您付费，意味着您自己接受本站规则且自行承担风险，本站不退款、不进行额外附加服务；查看《如何避免下载的几个坑》。如果您已付费下载过本站文档，您可以点击这里二次下载。
4、如文档侵犯商业秘密、侵犯著作权、侵犯人身权等，请点击“版权申诉”（推荐），也可以打举报电话：400-050-0827(电话支持时间：9:00-18:30)。

syn攻击原理以及防范技术【免费版】（Syn attack principle and prevention technology [Free Edition]）

syn攻击原理以及防范技术【免费版】（Syn attack principle and prevention technology [Free Edition]） SYN attack principle and Prevention Technology According to statistics, in all hacker attacks, SYN attacks are the most common and most easily used attack method. I believe many people remember the attack on the YAHOO website in 2000, when hackers exploited a simple and effective SYN attack, and some web worms were more vulnerable to SYN attacks. This paper introduces the basic principle, tools and detection methods of SYN attack, and probes into the technology of SYN attack prevention. TCP handshake protocol In the TCP/IP protocol, the TCP protocol provides a reliable connection service and establishes a connection with a three handshake. The first handshake: when the connection is established, the client sends the syn packet (syn=j) to the server and enters the SYN_SEND state, waiting for the server to confirm; The second handshake: the server received the syn package, you must confirm the customers SYN (ack=j+1), while also sending a SYN package (syn=k), that is, SYN+ACK package, at this time the server into the SYN_RECV state; The third Handshake: the client receives the servers SYN + ACK packet, send confirmation packet to the server ACK (ack=k+1), the package is sent, the client and server into the ESTABLISHED state, to complete the three handshake. After three handshakes, the client and server begin to transfer data, and there are some important concepts in the process: Unconnected queue: in the three handshake protocol, the server maintains an unconnected queue that opens an entry for each clients SYN package (syn=j), which indicates that the server has received the SYN packet, And send a confirmation to the customer, waiting for the customers confirmation package. The connections identified by these entries are in the Syn_RECV state of the server, and when the server receives a confirmation package from the client, the item is deleted and the server enters the ESTABLISHED stat