Anti-Attack Data Transmission via Header Preprocessing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing anti-attack methods are ineffective in distinguishing between normal and abnormal data flows during communication, often leading to false negatives where normal data is mistakenly filtered as attacking flow, causing network congestion and system breakdowns.
Innovation Solution
The method involves performing anti-attack pre-processing on information bits in the message header of communication protocol messages, storing processing information in extension bits, and sending the converted messages, allowing receiving devices to accurately parse and filter out abnormal messages without affecting normal communications.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If broadband capacity cleaning is used to reduce attack flow pressure, then network security is improved, but normal data flow may be mistakenly filtered causing false negatives
Solution Approach 1:
The patent applies preliminary action by performing anti-attack pre-processing on communication protocol messages before transmission. Specifically, it modifies information bits in message headers (such as TCP sequence numbers and acknowledgment numbers) through operations like bit reversal, compression, or encryption, and stores processing information in extension bits. This preprocessing enables receiving devices to accurately distinguish normal from abnormal messages during parsing, preventing false negatives while maintaining network security.
2Reliability
If stateful inspection firewall is used to filter ACK attack messages, then attack filtering effectiveness is improved, but system complexity and workload increase significantly
Solution Approach 1:
The patent reduces firewall complexity by performing anti-attack pre-processing at the sending device before messages reach the firewall. By modifying message header information bits and embedding processing information in extension bits, the firewall only needs to perform simple parsing operations based on the preprocessing information, rather than conducting complex stateful inspection on all incoming messages. This significantly reduces the firewall's workload and system complexity while maintaining effective attack filtering.
3Measurement precision
If message header information bits are modified for anti-attack protection, then defense accuracy is improved, but message parsing complexity increases
Solution Approach 1:
The patent introduces processing information as an intermediary element that mediates between the modified message header and the parsing operation. The preprocessing information, stored in extension bits of the message header, guides the receiving device on how to correctly parse the modified information bits. This intermediary mechanism allows accurate attack detection through header modification while keeping parsing complexity manageable by providing clear parsing instructions.
Data Source
AI summary
An anti-attack data transmission method and an apparatus thereof are provided. The method includes obtaining a communication protocol message to be transmitted; performing an anti-attack pre-processing for data on information bit(s) located at a message header in the communication protocol message, and generating processing information; storing the processing information in extension bit(s) at the message header of the communication protocol message to obtain a converted communication protocol message, wherein the message header of the communication protocol message includes the information bit(s) and the extension bit(s); and sending the converted communication protocol message to a receiving device. The present disclosure solves the problem of false negatives associated with normally transmitted data flow caused by existing anti-attack methods.