移动Ad Hoc网络分布式CA技术研究

分布式CA已经逐渐成为在移动Ad Hoc网络中提供密钥管理和认证等安全服务的一种重要方法。介绍了移动Ad Hoc网络分布式CA典型方案研究的最新进展，从安全性和服务可用性2个方面分析了移动Ad Hoc网络分布式CA的实用性。针对当前移动Ad Hoc网络分布式CA方案缺乏有效的安全性能评估模型问题，利用随机过程理论，提出了攻击流模型和网络安全性动态评估模型，并利用该动态评估模型对分布式CA方案的安全性进行了评估。动态安全性评估模型可以描述网络系统安全性的动态变化，有助于了解网络的动态安全性并及时采取应对措施。

Research of the Distributed CA in Mobile Ad Hoc Network

Distributed CA was an important approach to provide key management and authentication services for mobile Ad Hoc network.This paper researched the state of the art of the distributed CA firstly,analyzed the practice of various schemes from the view of availability and security.Furthermore,attack stream model and dynamic evaluation model were presented here by applying theory of stochastic process.The dynamic evaluation model was used to evaluate the existing distributed CA schemes in mobile Ad Hoc network.The model could not only describe the dynamic change of the security of the network,but also helped master to know the dynamic security of the network and take corresponding actions in time.