远程在线实验平台的安全性分析与改进  

The Security Analysis and Improvement of Remote Online Network Racks

作　　者：蔡永泉[1] 赵磊[1] 靳岩岩[1] 

机构地区：[1]北京工业大学计算机学院,北京100022

出　　处：《北京工业大学学报》2006年第5期461-466,共6页Journal of Beijing University of Technology

基　　金：北京市教委基金资助项目(KM200610005001);北京工业大学研究生科技基金资助项目(YKJ-2005-125)

摘　　要：为了促进远程教育的发展,推动远程在线实验平台的建设,分析了现有远程在线实验平台的安全性问题,将一次性登录密码策略和动态访问控制策略与认证、授权、记帐安全框架相结合,提出了一种远程在线实验平台的改进方案．改进后的方案有效地解决了Telnet协议引起的通信中用户密码被监听和攻击者占用全部 VTY端口导致合法用户无法连接访问控制服务器的问题,从而提高了远程在线实验平台的安全性．To stimulate the development of Distance Education and the construction of Remote Online Network Racks, the present security problems were analyzed and an improved scheme of Remote Online Network Racks was proposed in this paper. In the improved scheme, One-Time Password Policy and Dynamic Access Control Policy were integrated with AAA Framework, and the following problems were solved： the password was compromised because of the Telnet protocol which was not encrypted; and users were unable to connect to Access Servers led by Attackers connecting to all VTY ports. Therefore, the security level of the Remote Online Network Racks was raised.

关 键 词：数据安全 网络协议 远程控制 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]