基于AppSocket的网络打印作业脆弱性分析  

VULNERABILITY ANALYSIS ON APPSOCKET-BASED NETWORK PRINT JOB

作　　者：杨宏宇[1] 王梓[1] 

机构地区：[1]中国民航大学计算机科学与技术学院,天津300300

出　　处：《计算机应用与软件》2015年第3期302-305,共4页Computer Applications and Software

基　　金：国家自然科学基金项目(60776807;61179045);国家科技重大专项项目(2012ZX03002002);国家高技术研究发展计划项目(2006AA12A106);天津市科技计划重点项目(09JCZDJC16800);中国民航科技基金项目(MHRD201009;MHRD201205)

摘　　要：网络打印机近年来得到广泛应用,但网络打印作业在安全性方面有很大局限性。从网络传输协议和网络打印控制两个方面分析基于AppSocket协议的网络打印作业的脆弱性,提出中间人攻击和远程控制攻击两种针对网络打印作业的攻击模式。实验结果表明,基于AppSocket协议的网络打印作业受到两种模式的攻击时存在安全隐患,可能造成信息泄露、非法广播、密码丢失等后果。最后,针对提出的攻击模式给出了具有可操作性的防范措施,作为网络打印作业在安全性方面的补充。Network printers are widely used in recent years,but the security of network print jobs is very limited. In this paper we analyse the vulnerabilities of App Socket protocol-based network print jobs from two aspects of network transmission protocol and network printing control,and present two attack patterns,the man-in-the-middle attack and the remote control attack,against the network print jobs.Experimental results show that there are the security vulnerabilities when the App Socket protocol-based network print jobs are attacked by these two patterns,and this may lead to the consequences of leakage of information,illegal broadcast,loss of password,etc. At last,we give the operable precautions against the presented attack patterns as the security supplement for network print jobs.

关 键 词：网络办公设备 网络打印 AppSocket协议 打印作业语言 中间人攻击 

分 类 号：TP309.1[自动化与计算机技术—计算机系统结构]