基于主动秘密共享的Web容侵策略研究

在基于传统秘密共享的Web服务中，入侵者可长时间攻击，降低了系统的可靠性，不再适用。本文提出了一种基于主动秘密共享的Web服务器入侵容忍方案，并给出了改进可验证秘密共享方案后的影子产生算法和更新算法。该方案在不改变共享Web服务器私钥的情况下，周期性地更新私钥影子并且销毁原来的影子值，使得入侵者的可利用时间缩短
在一个周期内，从而保证Web私钥的长期安全性。

An Intrusion Tolerance Strategy Based on Proactive Secret Sharing for Web Applications

The Web server scheme based on traditional secret sharing is not applicable because the adversary has so much time to mount attacks that this will reduce the dependability. This paper presents a Web server system based on proactive secret sharing, and provides share initialization and renewal algorithms with an improved verifiable secret sharing scheme. This system proposes an effective scheme maintaining the long-time security of Web server private keys, where shares are periodically renewed without changing the shared key and previous shares are all erased in such a way that the available time for the adversary will be reduced to a single time period.