一种基于第三方平台可信证明的SSH协议  

A SSH Protocol Based on the Trusted Attestation of a Third Party Platform

作　　者：张亚奇[1] 何永忠[1] 于爱民[2] 

机构地区：[1]北京交通大学计算机与信息技术学院,北京100044 [2]中国科学院信息工程研究所,北京100090

出　　处：《信息网络安全》2016年第12期34-45,共12页Netinfo Security

基　　金：国家自然科学基金[61402035]

摘　　要：SSH(Secure Shell)作为使用最广泛的网络安全协议之一,面临着多种安全问题。在现有条件下,攻击者可以利用SSH的安全弱点实施攻击。可信计算远程证明技术为我们提供了防范这种攻击的思路。SSH协议可以与远程证明结合来增强安全性。文章首先分析SSH面临的安全问题,然后提出一种基于第三方平台可信证明的SSH协议即TDSSH协议,并给出代码层面的主体实现。最后对该协议进行安全性分析和评估。文章提出的TDSSH协议对其他网络安全协议的可信增强研究有积极意义。TSSH （Shell Secure）, as one of the most widely used network security protocols, faces many kinds of security problems. Under the existing conditions, the attacker can use the security vulnerability of SSH to implement the attack. Trusted computing remote attestation technology provides a way for us to prevent such attacks. SSH protocol can be combined with remote attes^tion to enhance security. There are many deficiencies in the existing research about the trusted security protocol.This paper firstly analyzes the security problems faced by SSH, then proposes aSSH protocolbased on trustedattestationof third party platform, namely TDSSH protocol and gives the main implementation on code level. Finally we conduct the safety analysis and evaluation of the protocol. TDSSH protocol proposed in this paper has positive significance for research about trusted enhancement ofother network security protocols.

关 键 词：SSH 远程证明技术 可信计算 可信增强 

分 类 号：TP393.04[自动化与计算机技术—计算机应用技术]