基于主动秘密共享的Web容侵策略研究  

An Intrusion Tolerance Strategy Based on Proactive Secret Sharing for Web Applications

作　　者：李庆华[1,2] 姚静[1,2] 赵峰[1,2] 

机构地区：[1]华中科技大学计算机科学与技术学院,湖北武汉430074 [2]国家高性能计算中心(武汉),湖北武汉430074

出　　处：《计算机工程与科学》2006年第8期34-35,49,共3页Computer Engineering & Science

基　　金：国家自然科学基金资助项目(60273075)

摘　　要：在基于传统秘密共享的Web服务中,入侵者可长时间攻击,降低了系统的可靠性,不再适用。本文提出了一种基于主动秘密共享的Web服务器入侵容忍方案,并给出了改进可验证秘密共享方案后的影子产生算法和更新算法。该方案在不改变共享Web服务器私钥的情况下,周期性地更新私钥影子并且销毁原来的影子值,使得入侵者的可利用时间缩短在一个周期内,从而保证Web私钥的长期安全性。The Web server scheme based on traditional secret shanng is not applicable because the adversary has so much time to mount attacks that this will reduce the dependability. This paper presents a Web server system based on proactive secret sharing, and provides share initialization and renewal algorithms with an improved verifiable secret sharing scheme. This system proposes an effective scheme maintaining the long-time security of Web server private keys, where shares are periodically renewed without changing the shared key and previous shares are all erased in such a way that the available time for the adversary will be reduced to a single time period.

关 键 词：入侵容忍 主动秘密共享 WEB安全 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]