摘要： 分析了IKE主模式交换过程中存在的问题,在此基础上提出了通过伪造主模式交换消息以破坏IPSec安全关联建立的方法,并对该方法能够成功破坏IPSec安全关联建立的原因进行了分析,最后提出了对IKE协议改进的方法。
关键词:
IKE,
ISAKMP,
主模式交换,
快速模式交换
Abstract: The paper analyzes the problem existed in the process of IKE main mode exchange,and then presents a method by which the establishment of IPSec security association can be destroyed through fabricating the messages of IKE main mode exchange.It also analyzes the reason that people can successfully destroy the establishment of IPSec security association.At last,it presents the improved method to IKE protocol.
中图分类号:
陈麟,刘渊,李焕洲,高行宇. 采用IKE主模式交换漏洞对IPSec安全关联建立的破坏[J]. , 2005, 31(21): 53-.
CHEN Lin1,LIU Yuan2,LI Huanzhou1,GAO Xingyu2. Destroying the Establishment of IPSec Security Association by Utilizing Leak of IKE Main Mode Exchange[J]. , 2005, 31(21): 53-.