eMule协议的安全性研究  

Research on eMule Protocol's Security Characteristic

作　　者：刘简达[1] 施勇[1] 薛质[1] 

机构地区：[1]上海交通大学信息安全工程学院,上海200240

出　　处：《计算机工程》2009年第13期134-136,共3页Computer Engineering

基　　金：国家"863"计划基金资助项目(2006AA01Z403)

摘　　要：研究eMule协议在安全性设计方面所存在的缺陷和不足,指出eMule软件在用户隐私泄露、用户积分欺诈和恶意代码攻击3个方面对用户造成的风险,给出改进方案。针对eMule协议在Ed2k链接格式上的2个漏洞提出一种新的攻击方式,设计攻击流程,并进行模拟攻击实验,实验结果表明该攻击方式的成功率达到100%。This paper studies the limitation and shortage of eMule protocol＇s security design. Based on the study, the eMule software can bring risk to users in three aspects such as privacy leaking, credit cheating and malicious code attack. The suggestions for improvement are proposed accordingly. A new attack method which is based on two leaks of the Ed2k link format is established. It designs the attack flow, and an attack simulation experiment is processed, which shows that the success ratio of this attack method is 100%.

关 键 词：安全保密 eMule协议 网络攻击 P2P技术 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]