Sum Chain Based Approach against Session Hijacking in MPTCP

Abstract

Multipath TCP (MPTCP) is an extension of TCP that provides communication through multiple paths between peers. Due to the existence of multiple paths, MPTCP is exposed to many threats other than those present in usual TCP. IETF’s working group has done a threat analysis on MPTCP and has listed possible attack scenarios in MPTCP, in which session hijacking by a partial on-path active attacker is considered as a minor one. This paper proposes a sum chain based approach against the session hijacking which require the attacker to be on-path in order to be successful.