| 一种NDP中间人攻击及对策 |
| |
| 引用本文： | 张敏,袁丁,肖筱.一种NDP中间人攻击及对策[J].通信技术,2009,42(4):123-126. |
| |
| 作者姓名： | 张敏 袁丁 肖筱 |
| |
| 作者单位： | 四川师范大学,计算机科学学院,四川,成都,610101 |
| |
| 基金项目： | 国家自然科学基金，四川省科技厅科技攻关项目 |
| |
| 摘 要： | 邻居发现协议（Neighbor Discovery Protoc01，NDP）作为IPv6协议的重要组成部分，取代了IPv4中的ARP协议、ICMP路由发现和ICMP重定向功能。文章主要分析了在使用CGA（cryptographically Generated Addresses）保护NDP安全情况下存在的一种新的中间人攻击，并在此基础上利用改进的CGA来防御这种中间人攻击，同时分析了这种改进的可行性及优点。
|
| 关 键 词： | IPv6 CGA 邻居发现 中间人攻击 |
Man-in-the-middle Attack and Solution in NDP |
| |
| ZHANG Min,YUAN Ding,XIA xiao.Man-in-the-middle Attack and Solution in NDP[J].Communications Technology,2009,42(4):123-126. |
| |
| Authors: | ZHANG Min YUAN Ding XIA xiao |
| |
| Affiliation: | (Department of computer science, Sichuan Normal University, Chengdu Sichuan 610101, China) |
| |
| Abstract: | NDP（Neighbor Discovery protocol） is an important part of IPv6, which corresponds to a combination of ARP protocol, ICMP router discovery and ICMP redirect function in IPv4. This paper analyzes a new man-in-the-middle attack in NDP when CGA（Cryptographically Generated Addresses） is used to protect the security of NDP. And thus an improved CGA is proposed to resist the man-in-the-middle attack. At the same time, the advantage and feasibility of such improvement is discussed. |
| |
| Keywords: | IPv6 CGA |
| 本文献已被 维普 万方数据 等数据库收录！ |
|
