OSPF协议漏洞机理及其防范措施  

OSPF Routing Vulnerability Mechanism and Prevention Measures

作　　者：周轩[1] 王永杰[1] 覃志波 

机构地区：[1]合肥电子工程学院网络系,合肥230037 [2]海军指挥学院信息系,南京211800

出　　处：《指挥信息系统与技术》2015年第5期40-45,共6页Command Information System and Technology

摘　　要：开放式最短路径优先(OSPF)协议是目前应用广泛的路由协议之一。首先,介绍了OSPF协议的安全机制和面临的典型威胁;然后,分析了一种新型OSPF协议漏洞机理,在图形化网络模拟器(GNS3)模拟生成的测试网络环境中复现了漏洞场景,并对其危害性进行了模拟测试。测试结果表明,该漏洞可躲避OSPF协议的安全机制,产生持久路由操控效果。最后,针对该漏洞提出了防范措施。The open shortest path first （OSPF） protocol is one of the most widely deployed interi- or gateway protocols. Firstly, the security mechanisms and common threats of the OSPF proto- col are introduced. Then, the principles of a new OSPF vulnerability are analyzed. With graph- ical network simulator （GNS3） simulation software, this vulnerability is replicated in a simula- tion network environment. Experimental results show that by exploiting the vulnerability, the fight back mechanism can be evaded and the routing tables can be persistently subverted. Finally, some practicable security measures are presented to defend against the new vulnerability.

关 键 词：网络安全 开放式最短路径优先协议 漏洞 网络模拟 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]