针对2种SSL协议攻击方法的解决方案  

Solutions to two methods of SSL protocol attack

作　　者：吴国凤[1] 王芳芳[1] 张岩 

机构地区：[1]合肥工业大学计算机与信息学院,安徽合肥230009 [2]安徽高新学院计算机系,安徽合肥230001

出　　处：《合肥工业大学学报（自然科学版）》2013年第10期1217-1221,共5页Journal of Hefei University of Technology：Natural Science

摘　　要：文章针对SSL Sniffing攻击和SSL Stripping攻击提出2种解决方案,提出了利用可信第三方提供DH算法中的2个重要参数来预防SSL Sniffing攻击,引入数字签名技术和还原重定向地址的手段来预防SSL Stripping攻击,并对改进模型做出安全分析。Two kinds of solutions for SSL Sniffing attack and SSL Stripping attack are put torward. Two important parameters of D-H algorithm provided by the trusted third party are used to prevent SSL Sniffing attack. For the SSL Stripping attack, the digital signature technology and the reducing redirection address method are introduced. A safety analysis of the improved model is also made.

关 键 词：SSL协议 中间人攻击 SSL Sniffing攻击 SSL Stripping攻击 D-H算法 

分 类 号：TP309.7[自动化与计算机技术—计算机系统结构]