优化认证消息流防止中间人攻击  

Optimizing authenticating message sequence for preventing MITM attacks

作　　者：尹中旭[1] 吴灏[1] 朱俊虎[1] 

机构地区：[1]解放军信息工程大学信息工程学院,河南郑州450002

出　　处：《计算机工程与设计》2008年第4期812-813,823,共3页Computer Engineering and Design

摘　　要：中间人攻击是对网络协议的攻击,该攻击普遍存在并危害较大,很多安全协议也面临威胁。按照发展层次比较了对一般通信、附加认证和安全协议的通信和受保护认证通信的中间人攻击方式,分析了可以避免该攻击的几种方法。以联锁协议为基础,以受保护的认证协议为例,提出了通过改变认证消息序列避免攻击的安全认证协议构造方法。Man in the middle attacks is actions utilizing vulnerabilities of network protocols and is as popular as them. Even some secure protocols are under threat. The MITM vulnerabilities is compared in nomal network communications, authenticated as well as encrypted communication and protected authenticated communication and compares the responding avoiding methods based on analyzing. A method for preventing MITM attacks is presented by optimizing authentication message sequence by the instance of protected authenticated communication based on interlocking protocol.

关 键 词：中间人攻击 认证消息流 联锁协议 公钥基础设施 受保护扩展认证协议 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]