使用可信计算技术防范网络仿冒攻击  

Preventing Phishing Attacks Using Trusted Computing Technology

作　　者：邹永刚[1] 李伟华[1] 

机构地区：[1]西北工业大学计算机学院,西安710072

出　　处：《微处理机》2008年第2期47-49,52,共4页Microprocessors

基　　金：西北工业大学研究生创业种子基金资助(Z200565)

摘　　要：网络仿冒攻击已经成为互联网上最大的安全威胁之一,给金融机构和普通消费者造成了巨大的损失,严重影响了网上银行和电子商务的发展。我们分析了当前网络浏览器存在的安全漏洞,讨论了在线用户验证的问题,并且提出了使用可信计算平台对在线用户验证的方法。这种方法不仅能使很多网络仿冒攻击失效,而且可以防范其他在线攻击。Phishing attacks , which have became one of the most severe threats on the Internet, have caused heavy losses for financial institutions and common customers. Phishing has blocked the develop of online banking and electronic commerce. We analyze the vulnerabilities of current web browsers, discuss online user authentication, and a method for online user authentication using trusted computing platforms is proposed. The proposed approach makes a class of phishing attacks ineffective ; moreover, the proposed method can also be used to protect against other online attacks.

关 键 词：网络仿冒 电子商务 网络浏览器 可信计算组织 可信平台模块 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]