Internet密钥交换协议的安全性分析  

Security Analysis of Internet Key Exchange Protocol

作　　者：宋育芳[1] 张宏科[1] 

机构地区：[1]北方交通大学电子信息工程学院,北京100044

出　　处：《计算机工程与应用》2004年第8期136-139,共4页Computer Engineering and Applications

基　　金：国家863高技术研究发展计划资助项目(编号:2001AA121014)

摘　　要：Internet密钥交换(IKE)协议是IPSec协议体系中最重要的部分,对于在不安全网络上安全地进行通信具有重要的意义。文章从主模式交换协商过程的分析入手,分析比较了几种验证算法的安全强度,之后从防止中间人的攻击,复杂性,防止DOS攻击等方面指出了IKE协议的缺陷和不足,并提出了相应的改进意见。Internet key exchange protocol is the most important part of IP security protocol,and it plays an indispens-able role in communicating securely on the unsecured network.The dissertation embarks on the analysis of the negotia-tion process of main mode exchange,then gives a deep security ability analysis and comparition of different authentica-tion methods.What's more,The dissertation puts out the disadvantages of Internet key exchange protocol from the as-pects of its ability of protecting against man-in-the-middle attack,its complexity and its ability of protecting against denial-of-service attack,and accordingly gives advises to improve its security ability.

关 键 词：IPSEC协议 INTERNET密钥交换协议 安全联盟(SA) 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]