基于细胞自动机的软键盘布局随机化方案  

Randomization of soft keyboard layout based on cellular automata

作　　者：李鹏伟[1,2] 傅建明[1,2,3] 沙乐天[1,2] 丁爽[1,2] 

机构地区：[1]武汉大学计算机学院,湖北武汉430072 [2]武汉大学空天信息安全与可信计算教育部重点实验室,湖北武汉430072 [3]武汉大学软件工程国家重点实验室,湖北武汉430072

出　　处：《北京交通大学学报》2013年第5期105-111,131,共8页JOURNAL OF BEIJING JIAOTONG UNIVERSITY

基　　金：国家自然科学基金资助项目(61202387);高等学校博士学科点专项科研基金资助(20120141110002);国家科技重大专项资助(2010ZX03006-001-01)

摘　　要：软键盘被广泛应用于敏感信息输入,但攻击者有可能通过消息截获、控件分析、偷窥、截屏或鼠标记录等方法得到软键盘的输入信息.本文总结和拓展了攻击方法并对相应防御措施进行了探讨;针对键盘布局随机化这一重要防御措施,对现有各方案进行分析;最后设计实现了一种基于细胞自动机的,与输入信息内容和输入过程相关联的软键盘布局随机化方案CAR,实验表明,这一方案具有良好的安全性和可用性.Soft keyboard is widely used to input sensitive information. However, attackers can in- tercept the input information of soft keyboard thro by attacks such as messages intercept, compo- nent analysis, peep, screenshots, or mouse record. First, we summarized and improved the exist- ing attacks and corresponding preventive measures. Then we evaluated the existing methods of keyboard layout randomization, which had a major impact on the safety of soft keyboard. Finally, we designed and implemented a layout randomization method based on cellular automata, which exploited the input information and the input process to enhance the randomization of soft key- board layout. Experimental results show that soft keyboards adopted on this method have good performance in both security and availability.

关 键 词：信息安全 键盘记录器 软键盘 细胞自动机 随机化 

分 类 号：TP309.1[自动化与计算机技术—计算机系统结构]