OpenSSL Heartbleed漏洞分析与研究  

Analysis and Research on OpenSSL Heartbleed Bug

作　　者：张生财[1] 

机构地区：[1]甘肃政法学院,甘肃兰州730050

出　　处：《信息安全与技术》2014年第11期42-43,60,共3页

基　　金：甘肃政法学院校级科研项目(GZF2012XQNLW14)

摘　　要：SSL是一流行的加密技术,大多数的SSL加密网站都基于名为OpenSSL的开源软件包,该软件存在一个会致使用户通讯内容泄露的严重漏洞。Heartbleed漏洞可能引发很大的网络灾难,因此非常有必要对它的安全漏洞进行研究。本文首先介绍了SSL及OpenSSL概念,然后分析了Heartbleed攻击原理,最后介绍了Heartbleed漏洞的检测及防范方法。SSL is a popular encryption technology. The most SSL encryption sites are based on open source software package called OpenSSL. The software has a serious bug which will cause the user communication contents leak. Heartbleed bug may lead to large network disaster. So it is necessary that security bug is studied. This paper the concept of SSL and OpenSSL is introduced firstly,and then the principle of Heartbleed attack is analyzed,finally the Heartbleed bug detection and prevention methods is introduced.

关 键 词：OPENSSL Heartbleed 漏洞攻击 防范方法 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]