摘要: 移动IPv6中的路由优化使移动结点和远端结点能够直接进行信息的交互,从而防止了移动IPv4中存在的三角路由攻击的问题。但是路由优化要求移动结点及时向远端结点发送绑定更新包。没有经过认证的或者假的绑定更新包将带来许多新的安全问题。RR(ReturnRoutability)协议有效地保证了绑定更新包的安全。但同时也存在着一些问题,其中最重要的就是重定向攻击。该文所做的就是防止这种重定向攻击,同时保证良好的性能和可扩充性。
关键词:
移动IPv6,
移动IPv6安全,
重定向攻击,
绑定更新安全
Abstract: MIPv6 uses binding update message to realize route optimization, which solves the problem of "triangle routing" of MIPv4. But it also exists some security issues. Redirected attack is the one of the urgent problems that RR protocol doesn't solve. This paper provides a way to avoid redirected attack. It also shows that the way is secure and is scalable to wide spread deployment.
中图分类号:
胡旭栋,于建华,张根度. 对移动IPv6中的重定向攻击的防御[J]. , 2004, 30(11): 105-.
HU Xudong,YU Jianhua,ZHANG Gendu. Defending Against Redirected Attack in MIPv6[J]. , 2004, 30(11): 105-.