基于OSPF路由欺骗的“黑洞”攻击及防御措施研究  

The Research of“Black Hole”Attacks on OSPF Routing Spoofing

作　　者：徐国天[1] 

机构地区：[1]中国刑警学院计算机犯罪侦查系,辽宁沈阳110854

出　　处：《信息网络安全》2012年第11期10-12,共3页Netinfo Security

基　　金：公安部应用创新计划项目[2011YYCXXJXY119]

摘　　要：文章详细分析了"黑洞"攻击的基本原理,研究了基于"黑洞"攻击的网络监听方法,给出了中转数据报的详细结构,提出了防御黑洞攻击的两种策略,即采用复杂密码加MD5认证方式和尽量缩小OSPF协议的扩散区域,可以在一定程度上预防"黑洞"攻击。This article described the network monitor method based on the ＂black hole＂.The structure of datagram had been carefully analyzed. Two defense strategy had been provided. A method used complex passwords and MD5 authentication mode, Reduced diffusion region method was also provided. To a certain extent, these strategies could prevent the ＂black hole＂ attacks.

关 键 词：OSPF 路由欺骗 黑洞 监听 MD5 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]