基于可信根与IP包拓展的局域网安全防护机制研究  

Research on LAN security protection mechanism based on trusted root and IP packet expansion

作　　者：陈大文 耿琦 Chen Dawen;Geng Qi(Jiangsu Golden Shield Detection Technology Co.,Ltd.,Nanjing 210042,China)

机构地区：[1]江苏金盾检测技术有限公司,江苏南京210042

出　　处：《无线互联科技》2021年第18期15-18,共4页Wireless Internet Technology

摘　　要：随着计算机技术的不断发展,人们对无线局域网的使用越来越频繁,但在带来便利和服务的同时,也伴随着很多安全性问题,与此同时对人们的隐私产生了巨大的威胁。而常见的抵御网络攻击的方法增加了网络管理员的工作负担。因此,文章提出了一种局域网安全防护的自动化方案,通过在网卡中内置固化的可信芯片,并由可信芯片执行文章提出的认证算法,实现IP数据包的拓展,嵌入数据包的认证信息。通过局域网交换机执行防护机制实现对常见的网络攻击的防御。With the continuous development of computer technology,people use wireless LAN more and more frequently,but it brings convenience and service at the same time,also accompanied by many security problems,at the same time,it has a huge threat to people’s privacy.The common methods to resist network attacks increase the workload of network administrators.Therefore,this paper proposes an automation scheme of LAN security protection,through the embedded trusted chip in the network card,and the trusted chip implements the authentication algorithm proposed in this paper,to realize the expansion of IP packets and embed the authentication information of packets.The LAN switch implements the protection mechanism to realize the defense against common network attacks.

关 键 词：可信芯片 IP数据包 局域网安全 ARP攻击 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]