Dynamic defense method based on port jump

Abstract

The invention provides a dynamic defense method based on port hopping. The method is used for detecting and reducing the influence of DOS and DDOS attacks. The method comprises the steps that a UDP / TCP port number used by a server changes along with time and a shared key between the server and a client, an authorized client with the key can determine the current port number used by the server, and a malicious user does not know the current effective port number. Then, the server can easily screen out illegal data packets by checking port numbers contained in UDP / TCP headers, thereby simplifying detection and filtering of hostile attack packets, and being compatible with UDP and TCP protocols.

Description

technical field [0001] The invention relates to the field of network security, in particular to a dynamic defense method based on port hopping. Background technique [0002] With the emergence of new wireless technologies and devices, the Internet is becoming more and more popular, and there are more and more devices connected to the Internet, mainly including server and client computers, PDAs, embedded devices, cars, etc., especially with the emergence of IPv6, these Hosts will benefit greatly from an internet connection. However, when they are connected to the Internet, they become potential targets of attack. One of the major threats to Internet security is DoS (Denial of Service) and DDOS (Distributed DoS) attacks. Traditional enterprise security mechanisms cannot well meet the growing Internet scale. Therefore, new simple security methods are needed to solve new types of devices or new security problems of devices. Aiming at the above requirements, a dynamic defense...

AI Technical Summary

Problems solved by technology

Traditional enterprise security mechanisms cannot well meet the growing Internet scale

Images