计算机工程2012，Vol.38Issue(9)：134-137,4.DOI:10.3969/j.issn.1000-3428.2012.09.040
认证协议漏洞自动检测系统设计与实现
Design and Implementation of Automatic Detection System for Authentication Protocol Loophole
摘要
Abstract
From the attacker's point of view, this paper sums up two features of attack on system and designs an automatic detection system for authentication protocol loophole. By target lookup algorithm, available resource lookup algorithm and protocol vulnerabilities searching algorithm, it finds a variety of ways to attack the authentication protocol to discover loopholes in the protocol. Needham-Schroeder, Neuman-Stubblebine and Otway-Rees protocol are used to do tests, whose results show that the system can correctly detect the vulnerability of the protocol, and simulate the attack methods.关键词
认证协议/漏洞查找/自动检测/可利用资源查找/目标查找Key words
authentication protocol/ loophole lookup/ automatic detection/ available resource lookup/ object lookup分类
信息技术与安全科学引用本文复制引用
林丽,关德君,徐剑,钟月..认证协议漏洞自动检测系统设计与实现[J].计算机工程,2012,38(9):134-137,4.基金项目
辽宁省自然科学基金资助项目“基于人体健康监测的无线传感网络辐射水平评估与优化”(201102067) （201102067）
