基于串空间理论的Kerberos协议安全性分析  

Security analysis of Kerberos protocol based on the strand space model

作　　者：王威[1] 胡铭曾[1] 张兆心[1] 

机构地区：[1]哈尔滨工业大学计算机网络与信息安全技术研究中心

出　　处：《高技术通讯》2008年第9期909-914,共6页Chinese High Technology Letters

基　　金：863计划(2006AA01Z451)资助项目

摘　　要：在对串空间理论和 Kerberos 协议进行深入研究的基础上,采用串空间理论模型对 Kerberos 协议进行了安全性分析。分析的过程和结果证明,Kerberos 协议满足串空间理论的认证性和服务器串随机数的秘密性,但不能保证发起者串随机数的秘密性,因此 Ker-beros 协议能实现安全认证功能,但存在口令猜测攻击。针对此问题,对 Kerberos 协议进行改进,改进后的协议满足发起者串随机数秘密性,增强了抗口令猜测攻击的能力。Based on the deep research on the strand space theory and the Kerberos protocol, this paper analyzes the security of the Kerberos protocol using the strand space model. The analysis procedure and results show that the Kerberos protocol can guarantee the authentication based on the strand space theory and the secrecy of the server strand＇s nonce, but can not guarantee the secrecy of the initiator strand＇s nonce. It proves that the Kerberos protocol can achieve the function of security authentication but may suffer password guessing attacks. Aiming at this problem, this study improved the Kerberos protocol and the improved protocol can guarantee the secrecy of the initiator strand＇ s nonce and strengthen the ability to defense password guessing attacks.

关 键 词：协议安全性 串空间 KERBEROS协议 形式化分析 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术] TN915.04[自动化与计算机技术—计算机科学与技术]