计算机工程与科学2024,Vol.46Issue(6):1022-1031,10.DOI:10.3969/j.issn.1007-130X.2024.06.009
基于标识密码的内生安全最短路径优先协议
An intrinsic secure open shortest path first protocol based on identity cryptography
荀鹏 1陈红艳 1王勇志 1李世杰1
作者信息
- 1. 国防科技大学计算机学院,湖南 长沙 410073
- 折叠
摘要
Abstract
Routing protocols like Open Shortest Path First Version 2(OSPFV2)TCP/IP internet routing protocol play a crucial role in the connectivity and secure transmission of information within net-works.However,traditional OSPFV2 lacks the capability to defend against source route spoofing or route information tampering,making networks vulnerable to attacks.Existing security strategies are of-ten add-on solutions,which can lead to new security issues or have low security effectiveness.To ad-dress this,a novel OSPFV2 protocol based on identity-based cryptography is proposed.This protocol embeds identity-based cryptography within the routing exchange process,enabling networks to efficient-ly defend against route tampering and spoofing attacks internally.Furthermore,considering various limitations in deploying secure OSPFV2 protocols on a large scale,an operational mechanism supporting incremental deployment is designed using opaque link state advertisements.Simulation experiments demonstrate that the proposed internally secure OSPFV2 protocol possesses the capability to resist source route spoofing and data tampering while minimizing convergence delay.关键词
OSPFV2协议/源路由伪造/内生安全/标识密码Key words
OSPFV2 protocol(open shortest path first version 2 protocol)/source routing informa-tion modification/intrinsic security/identity cryptography分类
信息技术与安全科学引用本文复制引用
荀鹏,陈红艳,王勇志,李世杰..基于标识密码的内生安全最短路径优先协议[J].计算机工程与科学,2024,46(6):1022-1031,10.