可信计算环境下的防钓鱼攻击技术  

Study on Anti-Phishing Based on Trusted Computing Technology

作　　者：王玉磊[1] 黄照鹤[1] 张崇[2] 

机构地区：[1]南阳理工学院,河南南阳473004 [2]南阳医学高等专科学校,河南南阳473009

出　　处：《计算机安全》2008年第9期3-6,共4页Network & Computer Security

摘　　要：网络欺诈和钓鱼攻击等在线攻击行为已经成为重要的网络安全问题。该文在讨论在线用户认证的基础上,提出了一种基于可信计算技术的在线用户认证技术。该技术可使某些钓鱼攻击失效,且可以抵抗其他类型的在线攻击。Web spoofing, phishing and other online attacks has been the most severe issues on web secrity. In this paper the issue of online user authentication is discussed, and a method for online user authentication using trusted computing platforms is proposed. The proposed approach makes a class of phishing attacks ineffective; moreover, the proposed method can also be used to protect against other online attacks.

关 键 词：SSL/TLS TCG 钓鱼 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术] S973.3[自动化与计算机技术—计算机科学与技术]