Replay attack identification method, system and device and readable storage medium

Abstract

The invention discloses a replay attack identification method, and the method comprises the following steps: determining an identifier and a first serial number of a client according to a data communication request sent by the client, and automatically adding one to the first serial number when the client sends a data transmission request to a server; judging whether the database has an identifier or not; if yes, obtaining a second serial number corresponding to the identifier in the database, and judging whether the first serial number is smaller than or equal to the second serial number; if the first serial number is smaller than or equal to the second serial number, marking the data communication request as a replay attack. According to the method, a large number of random numbers do not need to be recorded, consumption of computing resources is reduced, accurate time synchronization does not need to be kept between the nodes, and the efficiency and accuracy of replay attack defense are greatly improved. The invention also provides a replay attack identification system and device and a readable storage medium, which have the above beneficial effects.

Description

technical field [0001] The present application relates to the field of replay attack identification, in particular to a method, system, device and readable storage medium for replay attack identification. Background technique [0002] Replay Attacks, also known as replay attacks and replay attacks, refer to the attacker sending a packet that the destination host has received to achieve the purpose of deceiving the system. It is mainly used in the identity authentication process to destroy the correctness of authentication. A replay attack can be performed by the initiator, or by an adversary who intercepts and resends the data. Attackers use network monitoring or other means to steal authentication credentials and then resend them to the authentication server. [0003] The basic principle of replay attack is to resend the previously eavesdropped data intact to the receiver. In many cases, the data transmitted on the network is encrypted, and eavesdroppers cannot get the ex...

AI Technical Summary

Problems solved by technology

[0004] Existing replay attack defense schemes either have large memory overhead or need to maintain very accurate time synchronization, resulting in low efficiency and accuracy of replay attack defense

Images