基于SDN的电邮抵赖源头抑制方法  

SDN based e-mail repudiation source restraining method

作　　者：韩志耕[1,2] 冯霞[3] 陈耿[1,2] 

机构地区：[1]南京审计大学工学院,江苏南京211815 [2]南京审计大学江苏省公共工程审计重点实验室,江苏南京211815 [3]安徽大学计算机科学与技术学院,安徽合肥230601

出　　处：《通信学报》2016年第9期55-67,共13页Journal on Communications

基　　金：国家自然科学基金资助项目(No.71271117);江苏省自然科学基金资助项目(No.BK20151460);江苏省高校自然科学基金资助项目(No.16KJB520021);江苏省网络与信息安全重点实验室基金资助项目(No.BM2003201);江苏省公共工程审计重点实验室开放课题基金资助项目(No.GGSS2015-04)~~

摘　　要：受制于现有互联网体系可管控性的丧失,以签收电邮为代表的安全电邮技术仅能对电邮抵赖进行事后检测而无法实施源头抑制。基于SDN(software-defined networking)控制与数据相分离的思想,通过将定制的抵赖抑制单元旁路附加到传统电邮模型之上,提出一种不破坏现有电邮结构的电邮抵赖源头抑制方法。在给出抵赖抑制单元内嵌的电邮证据绑定协议、抵赖行为检测算法、签收信度评估模型和抑制策略形成算法后,对所提方法在4种交叉场景中进行了有效性测试。实验结果表明,在与当前电邮系统兼容共生的前提下,所提方法能够对电邮抵赖实施有效的源头抑制。With the limitation of controllability of the existing Internet architecture, the existing secure e-mail technology such as certified e-mail can only post detection but cannot source restraining on e-mail repudiation. Based on the idea of control and data separation of software-defined networking technology, by means of bypass attaching customized repudiation restrain unit to the traditional e-mail model. An e-mail repudiation source restraining method was proposed without destroying the existing e-mail structure. After presenting e-mail evidence binding protocol, repudiation behavior detection algorithm, certified reputation evaluation model, and repudiation restraining strategy formation algorithm embedded in repudiation restrain unit, the effectiveness were tested of the proposed method in 4 cross scenarios. The experimental results show that, under the premise of compatibility with the current e-mail system, the method can source restrain e-mail repudiation effectively.

关 键 词：电邮抵赖 源头抑制 SDN 签收电邮 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]