A method of defending against ddos ​​attacks based on channel hopping mode

Abstract

The invention relates to a method for resisting DDOS attacks based on a channel hopping mode. According to the method, communication parties negotiate about different communication channels temporarily, attackers cannot determine an attack target, and as long as one channel of the multiple channels can normally transmit data at any time, the communication parties can maintain a safe data channel; temporary keys are mapped to port numbers, the port numbers are generated in a random manner, the attackers are difficult to attack, a data packet is defined in the XML format, after the data packet is received, a flag bit is checked, duplicate removal is facilitated, packet loss is prevented, communication security and reliability are improved, and the DDOS attacks can be effectively resisted.

Description

technical field [0001] The invention specifically relates to a method for defending against DDOS attacks based on channel hopping mode. Background technique [0002] The full English name of DDOS is Distributed Denial of Service, which translates into distributed denial of service attack in Chinese. The full name of STS in English is Station-to-Station, which is translated into station-to-station in Chinese. It combines the Diffie-Hellman key agreement scheme with a secure interactive identification scheme. Interactive authentication is provided by signing a random challenge. [0003] With the continuous expansion of Internet applications, ordinary people can control multiple computers, and they can launch attacks by searching for easy-to-use attack tools on the Internet, especially DDOS attacks without technical content, which bring unprecedented levels to network security. technical challenge. DDOS uses client / server technology to combine multiple computers as an attack...

AI Technical Summary

Problems solved by technology

[0010] (1) Port jumping is only performed on one side of the communication, and port jumping is not performed on both sides of the communication at the same time

[0011] (2) Port hopping is only performed in the TCP / UDP protocol, and other protocol channels such as ICMP and IP are not considered

[0012] (3) The port number is generated by the lookup table and is not random

[0013] (4) The data packaging process does not carry out data reorganization and encryption, and the data package is easy to be disassembled

[0014] (5) No encryption algorithm is used in the transmission process, and the security is not high

Images