可信计算技术在防钓鱼攻击中的应用  

Application of Trusted Computing Technology in Anti-fishing

作　　者：徐锐[1] 王震宇[1] 康新振[1] 

机构地区：[1]解放军信息工程大学信息工程学院,郑州450002

出　　处：《计算机工程》2008年第8期195-197,共3页Computer Engineering

摘　　要：钓鱼攻击手段的多样性及其攻击后果的严重性给用户身份信息等私密数据的管理带来巨大威胁。该文分析了当今主要几类钓鱼攻击的手段,剖析其攻击原理,并在分析比较现有的几种密钥保护机制的特点的基础上,将可信计算技术与安全套接字相结合,提出一种抵御钓鱼攻击的方法。根据钓鱼攻击的特点,进行了安全性能分析,表明其能有效抵御钓鱼攻击。The diversity and severity of fishing attacks bring great threats to confidential data management such as identity management.This paper proposes a method which combines trusted computing technology and SSL（Secure Socket Layer）to prevent fishing attacks based on comparing current mechanisms for preventing fishing after introducing some main kinds of current fishing attacks and analyzing the rationale of it.The security analysis shows that the proposed method can prevent current main kinds of fishing attacks effectively.

关 键 词：可信计算 钓鱼攻击 证书 密钥 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]