抵御DoS攻击的认证协议安全方案

认证协议为保证其安全性,通常要使用复杂的密码算法,从而造成DoS攻击隐患.为解决该问题,基于保护协议响应方的立场,综合Cookie方法和工作量证明方法的思想,采用两阶段认证的方法,提出了该一种抵御DoS攻击的认证协议安全方案.对方案进行了框架设计和实现设计,并根据方案建立实验模型.实验结果的分析表明了方案抵御DoS攻击的能力,然后分析了安全方案的安全特性.最后应用安全方案对Helsinki协议进行了改进,增强了该协议的抗DOS攻击能力.

Security solution for protecting authentication protocols against denial of service attack

Authentication protocols need to use complicated cryptogram algorithm to ensure its security,which caused the DoS attack weakness.To solve this problem,based on protecting protocol's responder,combined the idea of cookie way with proof of work,using two-phase means,a security solution for protecting authentication protocols against DoS attack is proposed.The solution has full structure design and implementation design,the experiment model is built according the solution,the analyses about experimental result shows the ability of the solution on defending DoS attack,and then the security performance of the solution is analyzed.Finally the Helsinki protocol is improved using security solution that enhances the ability of the protocol on defending DoS attack.