IP网络安全多播控制机制的设计与实现  

Design and Implementation of Multicast Security Control Mechanisms in IP Networks

作　　者：李治宇[1] 沈苏彬[1] 

机构地区：[1]南京邮电学院网络技术研究中心,江苏南京210003

出　　处：《南京邮电学院学报（自然科学版）》2005年第1期35-41,共7页Journal of Nanjing University of Posts and Telecommunications

基　　金：国家自然科学基金 (60273091);江苏省自然科学重点基金(BK2001205)资助项目

摘　　要：多播的安全问题不单单只包括多播分组数据的安全性。利用多播的安全隐患发起拒绝服务攻击现象在网络环境中越来越多。多播的安全隐患根源是多播的开放组模式。通过研究现有多播控制协议的安全问题,总结恶意攻击的特性并提出一种多播安全控制的解决方案,用于缓解多播安全漏洞对多播传输造成的危害。该方案可以使网络管理员按照网络应用的具体要求有效的控制和管理多播分组。并且在Linux平台下实现了该方案。The security of multicast is not only composed of security of multicast data. Denial of Service attack based on security vulnerabilities of multicast protocols occures more and more frequently in network environment. The open group multicast model leads to security vulnerabilities. By investigating the security vulnerabilities of the existing multicast protocols, this paper summarizes the characteristics of malicious attacks and proposes a multicast security control solution to alleviate the security vulnerabilities in multicast transmission. The solution is implemented in the Linux operating system.Network administrator can control and manage multicast packets effectively according to specific network applications with the solution.

关 键 词：网络安全 多播 安全控制 拒绝服务攻击 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]