基于用户地址动态变化的防御方法  

Defense method based on user address dynamic mutation

作　　者：林玉香[1] 王慧婷 LIN Yu -xiang1 , WANG Hui- ting2(1. School of Software, Nanyang institute of Technology, Nanyang 473000, China~ 2. institute of Science and Technology Development, Beijing University of Posts and Telecommunications, Beijing 100876, Chin)

机构地区：[1]南阳理工学院软件学院,河南南阳473000 [2]北京邮电大学科学技术发展研究院,北京100876

出　　处：《计算机工程与设计》2018年第8期2417-2421,共5页Computer Engineering and Design

基　　金：河南省基础前沿基金项目(142300410108);河南省科技攻关计划基金项目(162102210113)

摘　　要：基于IP的移动通信网中,用户静态IP地址容易通过流量监听或者地址探查的方法被识别出来,通过对这一问题进行研究,提出一种基于用户地址动态变化的安全通信方法。通过单向哈希函数生成虚拟IP地址,利用归一化方法将其映射到动态地址资源池,将移动用户终端变成无法被跟踪的目标,保护用户信息安全。仿真结果表明,该方法能有效防御基于地址探查和流量监听类型的攻击。Traffic analysis or address probe has been exploited by attackers to recognize user IP address in mobile networks.A security communication method based on user address dynamic mutation was proposed to solve the problems.The users were turned into moving targets that could not be traced using one-way hash function to create virtual IP addresses and they were mapped to the dynamic address pool using the normalization method,to protect the security of user information.The results show that the method is effective in defending against the traffic analysis and address probe attacks.

关 键 词：IP多媒体子系统 移动目标防御 地址动态变化 重复性检测 会话初始协议 

分 类 号：TN918.91[电子电信—通信与信息系统]