密码服务系统安全性能分析与测试  

Analysis and testing of security performances ofcryptographic service system

作　　者：容晓峰[1] 苏锐丹[1] 刘平[2] 周利华[1] 

机构地区：[1]西安电子科技大学计算机网络与信息安全教育部重点实验室 [2]国家信息安全工程技术研究中心,北京100093

出　　处：《系统工程与电子技术》2004年第10期1510-1513,共4页Systems Engineering and Electronics

基　　金：国家"十五"科技攻关计划基金资助课题(2002BA103A04)

摘　　要：分析和检测密码服务系统安全性能是目前该系统研制过程中的一个难点,基于某型号分布式密码服务系统的研制,通过给出系统的安全体系结构,从物理安全、协议安全、算法和系统使用安全等方面对系统各层次、各功能部件可能存在的安全隐患进行了分析,指出了系统应具有的基本安全性能,并结合研制中的实际测试,给出了相应的检测方法。应用表明,这些方法有效并且实用,对密码服务系统的安全性能测试研究具有理论和实践的指导作用。The research of methodologies to analyze and test the security performances is not sufficient, which is one of the obstacles in design and implementation of security cryptographic system. Based on the research and development of a distributed cryptographic system, a description of the state-of-the-art of this topic is given. First, the security architecture of the distributed cryptosystem is presented. Second, potential security vulnerabilities of cryptographic system are analyzed in respect of hardware, protocol, algorithm and application as far as the basic security performance of the system is concerned. Third, the test methodologies for these security performances are proposed. Result shows that these analysis and test methodologies are practical to security testing, the above proposed methods provide a significant guidance for the research and application in security performance test for cryptographic service system.

关 键 词：密码系统 安全性能 安全性测试 安全漏洞 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]