Defending Denial of Service Attack in the IKEv2 Protocol
Zhao Hua-feng · Modern Electronics Technique · 2007
The principal of Internet Key Exchange protocol(IKEv2) is analyzed and its exchange process is introduced.The security defect,which is the memory resource exhaustion DoS attack and based data fragment DoS attack is found.Then the way of using Cookie information to authenticate the initiator is given to defend the memory resource exhaustion DoS attack with IP deceiving.And the way of using IP list of recombining data fragment is put forward to defend the DoS attack based data fragment.All these can enhance the security of IKEv2.