基于内部安全隧道防止节点隐藏木马的新方法  

A New Method to Prevent Trojan-in Node Based on Inner Secure Tunnel

作　　者：李大双 陈周国 

机构地区：[1]保密通信重点实验室,成都610041

出　　处：《中国电子科学研究院学报》2015年第4期379-382,共4页Journal of China Academy of Electronics and Information Technology

基　　金：国家863计划相关项目

摘　　要：针对互连网络路由交换设备的攻击事件越来越多,其中的一种攻击手段是植入软硬件木马,远程获取网络节点的配置管理、动态拓扑与路由数据以及密码参数等与网络正常运行和安全密切相关的重要信息,为网络攻击提供依据。要发现和消除网络软硬件系统中埋藏很深的木马十分困难。我们提出一种新颖的方法,在网络路由与交换节点的不同链路端口之间建立安全加密防护隧道,能够防止通过植入隐藏木马远程窃取和篡改网络节点的重要数据。There are an increasing number of attacks on routing and switching devices, one of which is stealing the pivotal net working configuration and encrypting parameter, dynamic topology and routing information remotely by using hidden embedding Trojan. these parameter and state information are related to the normal operation and security of internet, and may be used by a network attacker for malicious action. It is very difficult to find and clear Trojan hidden in the software and hardware systembetimes. A novel method is proposed based on the inner secure encrypting tunnel between the different links in routing and switching node. It can prevent the remote attack for stealing and tampering the key data by planting and embedded Trojan.

关 键 词：隐藏木马 路由交换 安全隧道 

分 类 号：TN393[电子电信—物理电子学]