Internet密钥交换协议的安全性分析

Internet密钥交换(IKE)协议是IPSec协议体系中最重要的部分,对于在不安全网络上安全地进行通信具有重要的意义。文章从主模式交换协商过程的分析入手,分析比较了几种验证算法的安全强度,之后从防止中间人的攻击,复杂性,防止DOS攻击等方面指出了IKE协议的缺陷和不足,并提出了相应的改进意见。

Security Analysis of Internet Key Exchange Protocol

Internet key exchange protocol is the most important part of IP security protocol,and it plays an indispens-able role in communicating securely on the unsecured network.The dissertation embarks on the analysis of the negotia-tion process of main mode exchange,then gives a deep security ability analysis and comparition of different authentica-tion methods.What's more,The dissertation puts out the disadvantages of Internet key exchange protocol from the as-pects of its ability of protecting against man-in-the-middle attack,its complexity and its ability of protecting against denial-of-service attack,and accordingly gives advises to improve its security ability.