Anti-attack fragmented message processing method and device, computer and storage medium

Abstract

The invention relates to an anti-attack fragmented message processing method and device, a computer and a storage medium, which are used for improving the anti-attack performance of the regrouping offragmented messages. The method comprises the following steps of determining whether the total number of fragmented messages in a hash table exceeds a first preset threshold value or not, wherein thehash table is used for recording message recombination items to be recombined and the fragmented messages which are suspended in each message recombination item to be recombined; and when the total number exceeds the first preset threshold value, clearing the message recombination items in the hash table based on a least recently used (LRU) algorithm.

Description

technical field [0001] The present disclosure relates to the field of computer technology, and in particular, to an attack-proof fragmented message processing method, device, computer and storage medium. Background technique [0002] When transmitting data in the network, fragmentation reassembly logic is often used, that is, a complete message is divided into multiple fragmented messages for transmission, and then the receiving end reassembles the fragmented messages to obtain a complete message . In fragment reassembly logic, fragmented messages belonging to different messages will be stored in different areas, so as to correctly realize the reassembly of each message. [0003] At present, for security vendors, the anti-attack performance of the firewall is the key point. However, some attack the firewall by using fragmented packets. For example, for the same packet, sending one of the fragmented packets will not Then send again, in this way, the computer cannot complete...

AI Technical Summary

Problems solved by technology

[0003] At present, for security vendors, the anti-attack performance of the firewall is the key point. However, some attack the firewall by using fragmented packets. For example, for the same packet, sending one of the fragmented packets will not Then send again, in this way, the computer cannot complete the reorganization of fragmented packets, and these fragmented packets will continue to occupy storage space, resulting in insufficient memory when allocating normal fragmented packets, and may even cause the firewall to be in a paralyzed state

[0004] It can be seen that there is currently no better method for preventing fragmentation attack

Images