对SSH证书应用模式下的中间人攻击  

MIMA AGAINST SSH PROTOCOL IN CERTIFICATE APPLICATION MODE

作　　者：李珠峰[1] 王飞[1] 王叶[2] 

机构地区：[1]解放军外国语学院语言工程系,河南洛阳471003 [2]解放军外国语学院信息管理中心,河南洛阳471003

出　　处：《计算机应用与软件》2013年第11期316-318,共3页Computer Applications and Software

摘　　要：SSH是一款可以提供保密性、完整性和身份认证的应用层安全协议。SSHv2规定服务器身份认证时采用证书的方式通告自身公钥,并用数字签名技术进行认证,能够抵抗SSHv1所面临的中间人攻击。但是在SSHv2具体实现的过程中,不完善的网络环境会形成漏洞,研究发现对具有强攻击能力的攻击者而言,可以通过网络攻击植入伪证书进行中间人攻击。SSH is a security protocol at application level providing the confidentiality, integrity and authentication. SSHv2 specifies that in server＇ s authentication it announces its own public key in the way of certificate and authenticates with digital signature technology, and can resist MIMA （man-in-the-middle attack） encountered by SSHv1. However, in specific implementation process of the SSHv2 application, the imperfect internet environment may lead to vulnerabilities. The study finds that for the attackers who have strong attacking capabilities, it can implement MIMA by embedding the forgery certificates through networks.

关 键 词：安全壳协议 身份认证 中间人攻击 证书 签名 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]