Zeroconf网络的安全性分析及改进  

Analysing and improving security of Zeroconf networks

作　　者：周亦敏[1] 沈嘉杰[1] 

机构地区：[1]上海理工大学光电信息与计算机工程学院计算机系,上海200093

出　　处：《计算机工程与应用》2013年第2期141-144,共4页Computer Engineering and Applications

基　　金：上海市教委科研创新基金资助项目(No.11YZ121)

摘　　要：分析并指出Zeroconf(Zero configuration)网络易受到DNS欺骗攻击,提出并实现了一种增强其安全性的改进策略。该策略通过DNSSEC对Zeroconf网络中DNS消息收发提供权限认证和信息完整性检查,同时针对Zeroconf网络无中心、自组织的特点,改进DNSSEC原有的公钥分配和管理机制以适应其特性。实验结果证实该策略提高了Zeroconf网络的安全性。Zeroconf（Zero configuration） networks security are analyzed, and it is pointed out that Zeroconf networks are vulner- able to DNS spoofing attack. An improvement strategy is proposed. The strategy provides DNS message in Zeroconf networks with authentication and integrity by DNSSEC, and improves the DNSSEC public key distribution and management mechanisms in order to adapt to Zeroconf networks that are non-centralized and self-organizing. The experimental results show that the improvement strategy increases the security of Zeroconfnetworks.

关 键 词：零配置 数字签名 DNS安全扩展 网络攻击 密钥管理 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]