移动Ad Hoc网络分布式CA技术研究  

Research of the Distributed CA in Mobile Ad Hoc Network

作　　者：穆海冰[1] 张长伦[1] 刘云[1] 

机构地区：[1]北京交通大学电子信息工程学院,北京100044

出　　处：《武汉理工大学学报》2007年第4期140-143,共4页Journal of Wuhan University of Technology

基　　金：国家自然科学基金(60572035);通信与信息系统北京市重点实验室项目(JD100040513)

摘　　要：分布式CA已经逐渐成为在移动Ad Hoc网络中提供密钥管理和认证等安全服务的一种重要方法。介绍了移动Ad Hoc网络分布式CA典型方案研究的最新进展,从安全性和服务可用性2个方面分析了移动Ad Hoc网络分布式CA的实用性。针对当前移动Ad Hoc网络分布式CA方案缺乏有效的安全性能评估模型问题,利用随机过程理论,提出了攻击流模型和网络安全性动态评估模型,并利用该动态评估模型对分布式CA方案的安全性进行了评估。动态安全性评估模型可以描述网络系统安全性的动态变化,有助于了解网络的动态安全性并及时采取应对措施。Distributed CA was an important approach to provide key management and authentication services for mobile Ad Hoc network. This paper researched the state of the art of the distributed CA firstly, analyzed the practice of various schemes from the view of availability and security. Furthermore, attack stream model and dynamic evaluation model were presented here by applying theory of stochastic process. The dynamic evaluation model was used to evaluate the existing distributed CA schemes in mobile Ad Hoc network. The model could not only describe the dynamic change of the security of the network, but also helped master to know the dynamic security of the network and take corresponding actions in time.

关 键 词：网络安全评估 分布式CA 随机过程 移动AD Hoe网络 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]