0-RTT Attack and Defense of QUIC Protocol

QUIC(Quick UDP Internet Connection) is a secure transportation layer protocol developed by Google team and implemented in Chrome to achieve both low latency and high reliability. It has been officially renamed to "HTTP/3". With the wide application of this protocol, ensuring its security becomes extremely important, but the work in this field has been found insufficient. This paper aims to find out new security issues of the QUIC protocol based on an analysis of its security. Firstly, based on the characteristics of the QUIC protocol, we discuss the security of it from the attacker's point of view and present a new attack (0-RTT attack) formally for the first time [1], which can lead to a denial-of-service. Secondly, we introduce the principle and implementation conditions of 0-RTT attack, also build a mathematical model based on finite-state machine to describe the transition process of each state in the QUIC protocol. Finally, we discussed the scope of effective attacks and provided some feasible suggestions on how to prevent such attacks.