需求装载代码协议的安全缺陷分析  

Analysis for Security Flaw in Demand Loading Code Protocol

作　　者：夏正友[1] 蒋嶷川[2] 钟亦平[3] 张世永[3] 

机构地区：[1]南京航空航天大学计算机科学系,江苏南京210016 [2]香港浸会大学计算机科学系 [3]复旦大学计算信息技术系,上海200433

出　　处：《软件学报》2005年第6期1175-1181,共7页Journal of Software

摘　　要：使用SPI演算对主动网络的需求装载代码协议进行分析,发现其存在被重放攻击的安全漏洞.由于主动网络是计算-存储-转发模型,不同于传统网络的存储-转发模型,所以这种被重放攻击的安全缺陷将对主动节点产生难以预测的后果,并减低其性能和效率.为了消除被重放攻击的危险,修改了原有需求装载代码协议,并增加了其阻止重放攻击的能力.The authors use SPI calculus to analyze the demand loading code protocol of active network. The security flaw of being replay attack in this protocol is found. Model of active network is different from the tradition network. Since the model of active network is compute-storage-forward, and the model of tradition network is storage-forward. The replay attack would make the unexpected result for active network and letdown the performance and efficiency of active node. In order to prevent the replay attack, the authors amend the protocol and enhance the capacity for preventing replay attack.

关 键 词：主动网络 需求装载代码协议 SPI演算 重放攻击 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]