Capability analysis and improvement of JFKi anti-DoS

Compared to IKE protocol, the capability of JFKi anti-DoS attack is stronger. By in-depth study of JFKi protocol, the two kinds of DoS attack that JFKi may still suffer were analyzed. One is low-cost DoS attack which is lower calculation effort spent on the DoS attack, and the other is high-cost DoS attack which is higher calculation effort. To investigate the DoS attacks that JFKi may still suffer, the procedures of these attacks have been described in detail, and the cost of the attacker and the effect of the attacks have been analyzed deeply. Finally, the corresponding improvement solutions for low-cost DoS attack and high-cost DoS attack which influence to the efficiency of JFKi is minor have been proposed.