网络安全认证服务器防火墙数据存储加密仿真  

Network Security Authentication Server Firewall Data Storage Encryption Simulation

作　　者：曹士明 王宏志 CAO Shi-ming;WANG Hong-zhi(School of Computer Science and Engineering,Jilin University of Architecture and Technology,Changchun Jilin 130114,China;School of Computer Science and Engineering,Changchun University of Technology,Changchun Jilin 130012,China)

机构地区：[1]吉林建筑科技学院计算机科学与工程学院,吉林长春130114 [2]长春工业大学计算机科学与工程学院,吉林长春130012

出　　处：《计算机仿真》2022年第12期417-421,共5页Computer Simulation

摘　　要：为抵御安全认证服务器防火墙数据泄漏及篡改等恶意攻击,设计一种基于混合算法的防火墙数据存储加密方法。先依据二维离散小波的多分辨率特征对防火墙数据进行预处理,即对数据各列采取一维离散小波反向变换,完成数据重构,计算含噪时间序列。在小波指数中择取不同的临界值,确保预处理输出结果的准确性。融合超混沌系统与高级加密标准,创建混合存储数据加密算法,以三维增广系统为基础构建四维超混沌系统数学模型,利用四阶龙格—库塔法离散化处理超混沌系统,分组明文数据,运用异或混淆计算生成加密密钥与密钥参数,实现防火墙数据存储加密目标。仿真结果表明,所提方法具备优秀的密文统计特征与密钥敏感性,加密效率高,安全性强。In order to resist malicious attacks such as data leakage and tampering of the firewall of the security authentication server, a firewall data storage encryption method based on a hybrid algorithm is designed. Firstly, the firewall data was preprocessed according to the multi-resolution features of two-dimensional discrete wavelets, that was, each column of the data was transformed by the one-dimensional discrete wavelet to complete the data reconstruction and calculate the time series with noise. Different critical values were selected in the wavelet index to ensure the accuracy of the preprocessing output. A hybrid storage data encryption algorithm was created by integrating hyperchaos and advanced encryption standards. A mathematical model of a four-dimensional hyperchaotic system was constructed based on the three-dimensional augmented system. The fourth-order Runge-Kutta method was used to discretize the hyperchaotic system and group the plaintext data. And the encryption key and key parameters were generated by XOR obfuscation computation to achieve the firewall data storage encryption goal. Simulation results show that the proposed method has excellent ciphertext statistical characteristics and key sensitivity, high encryption efficiency and strong security.

关 键 词：安全认证服务器 防火墙数据 存储加密 小波变换 预处理 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]