Abstract: This paper introduces the middleman attack methods which are against the remote desktop protocol (RDP), discusses advantages and disadvantages of several current mainstream prevention strategies, and puts forward a new prevention strategy. The strategy, taking advantage of the original key agreement process of the RDP, designs a piecewise authentication scheme of the key agreement. Using the strategy can achieve the purpose of prevention and detection of middleman attacks. Finally, the security of the strategy is analyzed.

Key words: remote desktop protocol (RDP)| key agreement| middleman attack| prevention and detection

摘要： This paper introduces the middleman attack methods which are against the remote desktop protocol (RDP), discusses advantages and disadvantages of several current mainstream prevention strategies, and puts forward a new prevention strategy. The strategy, taking advantage of the original key agreement process of the RDP, designs a piecewise authentication scheme of the key agreement. Using the strategy can achieve the purpose of prevention and detection of middleman attacks. Finally, the security of the strategy is analyzed.

关键词: remote desktop protocol (RDP)| key agreement| middleman attack| prevention and detection