Currently, the TCP/IP model enables exploitation of vulnerabilities anonymously by unconditionally fulfilling every request for a connection into an application; the model only incorporates authentication within applications themselves, rather than as a precondition for access into applications. I am proposing the Universal Session Protocol as a change to the architecture of the TCP/IP model to include a session layer featuring a structured generalized process for authentication negotiation and fulfillment. The Universal Session Protocol addresses an urgent and vital need to eliminate unauthenticated data processing on security critical systems. Previous work regarding TCP/IP security has focused on the application design and implementation and existing protocol layers, but has failed to posit the addition of a session layer as a mitigating control. Failing to implement a distinct authentication layer leaves every resource connected to the global Internet, including life and security critical infrastructure, vulnerable to attacks from anonymous and untraceable sources. The Universal Session Protocol provides a solution by establishing a TCP/IP Session Layer that explicitly provides authentication before a data stream is accessible within an application. After authentication, an identity is associated with the data stream so that all data may be related back to that identity for forensic purposes. If authentication fails, the application will never process user data, rendering the service safe from anonymous bad actors.

翻译：当前，TCP/IP模型通过无条件满足每个对应用程序连接的请求，使得匿名漏洞利用成为可能；该模型仅将身份验证纳入应用程序内部，而非作为访问应用程序的前提条件。我提出通用会话协议作为对TCP/IP模型架构的修改，通过引入一个会话层来实现身份验证协商与履行的结构化通用流程。该协议解决了在安全关键系统上消除未经验证数据处理这一紧迫而至关重要的需求。以往关于TCP/IP安全的研究聚焦于应用程序设计与实现及现有协议层，但未能提出将会话层作为缓解控制措施。未能实现独立的身份验证层导致全球互联网上所有资源（包括生命与安全关键基础设施）易受匿名且不可追踪来源的攻击。通用会话协议通过建立TCP/IP会话层提供了解决方案——该层在应用程序可访问数据流之前明确提供身份验证。身份验证通过后，身份将与数据流关联，以便所有数据均可追溯至该身份用于取证分析。若身份验证失败，应用程序将不会处理用户数据，从而使服务免受匿名恶意行为者的威胁。