SSL-Webmail中间人监测技术研究  

Analysis on SSL-Webmail Monitoring based on Man-in-the-Middle Technology

作　　者：欧阳江[1] 李勍 刘嘉勇[1] 

机构地区：[1]四川大学电子信息学院,四川成都610021 [2]成都四五六信箱,四川成都610041

出　　处：《信息安全与通信保密》2012年第5期69-71,共3页Information Security and Communications Privacy

摘　　要：SSL协议是实现网络通信安全的关键协议之一,对信息的传输起到了认证和加密的作用,绝大多数电子邮箱都采用此技术传输信息,但其并非毫无漏洞。文中首先介绍SSL协议和HTTP协议,然后介绍了SSL欺骗,即SSL中间人攻击的原理,再结合DNS欺骗原理,重点分析了SSL中间人攻击的实现过程,并且分析了一种基于有限状态自动机的模式匹配算法的解析数据的方法,最后提出了基本的防范方法。SSL protocol is one of the key protocols for secure communication in the internet, and plays a important role in encrypting and authenticating information transmission. In fact most Webmails support SSL encrypted transfer. However, it is not a flawless protocol. This paper first describes SSL protocol, HTTP protocol and the principle of man-in-the-middle attack, then analyzes the implementation of man-in-the-middle attack based on the DNS redirection and discusses a finite state automaton pattern matching algorithm for data recovery, finally gives some advices on the prevention of man-in-the-middle attack.

关 键 词：SSL协议 中间人攻击 DNS欺骗 电子邮箱 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]