安全ARP的Clark-Wilson模型化  

Clark-Wilson Modeling of Secure ARP

作　　者：陈小岩[1] 贺也平[2] 徐梓耀[2] 邓灵莉[2] 

机构地区：[1]中国科学技术大学,合肥230026 [2]中国科学院软件研究所,北京100080

出　　处：《计算机科学》2008年第1期64-66,共3页Computer Science

基　　金：科技部攻关项目(编号2005BA113A02);发改委项目“安全系统软件产业化”资助

摘　　要：ARP协议漏洞严重威胁着TCP/IP的安全,一些基于对称或非对称密钥机制的安全ARP协议被相继提出。本文介绍了ARP协议攻击的原理和几个最出名的基于对称或非对称密钥机制的安全ARP协议,引入Clark-Wilson商业模型对ARP的完整性状态进行了分析,把改进协议Clark-Wilson模型化,在模型化的过程中找到了它们不能通过Clark-Wilson商业模型验证规则的关键点,并根据Clark-Wilson商业模型提出的经典场景,给出了相应的攻击场景。Vulnerabilities in the ARP protocol became a threat to TCP/IP security. Countermeasures to these vulnera- bilities based on Symmetric-Key Cryptography or Asymmetric-Key Cryptography are proposed recently. In the present paper, the principle of ARP attacks is analyzed, and the most popular secure ARP protocols are discussed. Clark-Wilson commercial model is introduced to analyze the integrity of ARP. While applying Clark-Wilson commercial model to the ARP integrity policy, all of the secure protocols failed to pass the rules of Clark-Wilson model. With the classical scenes of Clark-Wilson model, corresponding attack scenes are presented.

关 键 词：ARP 安全ARP CLARK-WILSON模型 完整性 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]