一种自适应容忍入侵的密码协议安全运行防护系统  

An adaptive intrusion-tolerant approach to protecting operation security of cryptographic protocols

作　　者：郝耀辉[1] 郭渊博[1,2] 卢昱[2] 

机构地区：[1]解放军信息工程大学电子技术学院,郑州450004 [2]军械工程学院,石家庄050003

出　　处：《高技术通讯》2009年第7期706-712,共7页Chinese High Technology Letters

基　　金：国家自然科学基金(60503012);863计划(2007AA01Z405)资助项目。

摘　　要：针对密码协议在实际运行中遭受攻击的问题,设计了自适应容忍入侵的密码协议安全运行防护系统。该防护系统主要由入侵检测模块和容忍入侵模块组成。入侵检测模块采用基于特征和异常的混合入侵检测模式,使用有限状态自动机(FSM)匹配密码协议执行中的各状态参数,实时检测密码协议的运行情况,并把检测结果发送给容忍入侵模块,触发容忍入侵模块根据预先设计好的自适应调整策略,对密码协议的运行进行调节,以达到容忍攻击的目的。采用模拟试验对系统模型进行了仿真测试,测试结果表明该模型能够在一定程度上成功检测对密码协议的攻击行为,并具有容忍某些特定类型攻击的能力。To protect the operation security of cryptographic protocols, the paper proposes an adaptive intrusion-tolerant approach which is composed of an intrusion detection module and an intrusion tolerance module. By adopting the mixed intrusion detection mode, the intrusion detection model uses the finite state machine （FSM） to match the parameters in the running of cryptographic protocols, which could conduct real-time detection of the characteristics of the cryptographic protocol operation, and send the detection results to the intrusion tolerance module, making it adjust the running of the cryptographic protocol according to the pre-designed self-adaptive strategy. The simulation demonstrated that this approach could be used to detect to a certain extent the attacks on cryptographic protocols and improve the intrusion-tolerance ability dominantly.

关 键 词：密码协议 自适应 容忍入侵 入侵检测 有限状态自动机(FSM) 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]