METHOD AND SYSTEM FOR PROCESSING FORGED TCP DATA PACKET

摘要

The present disclosure provides a method and a system for processing forged TCP packets. More specifically, the present disclosure utilizes a window size field in a header of a to-be-processed TCP packet and a window scaling factor to calculate a receive window value of the TCP packet for comparison with an actual receive window value. Further, based on a degree of deviation between the comparison result and a threshold, whether the to-be-processed TCP packet is forged is determined, such that the probability of finding and discarding the forged TCP packet is improved.