| 摘要: |
| 针对自由漫游移动代理数据完整性协议的攻击构造问题,使用已提出的数据完整性定义和形式化规约方法,研究了移动代理数据完整性保护协议合谋攻击构造方法,提出了一种针对Cheng-Wei 协议的新型概率攻击方法,该攻击在存在两个合谋攻击节点的情况下,能够在一定概率上形成对数据的截断攻击.该攻击方法对目前采用证据链进行数据完整性保护的移动代理数据完整性保护协议都有效. |
| 关键词: 安全协议 移动代理 数据完整性协议 完整性协议攻击 |
| DOI： |
| 分类号: |
| 基金项目:中国科学院国防创新基金(CXJJ-10-M20) |
|
| A Kind of Attack to Free Roaming Mobile Agent Data Integrity Protection Protocol |
|
MA Heng-Tai, LI Peng-Fei
|
|
National Key Laboratory of Integrated Information System Technology, Institute of Software, The Chinese Academy of Sciences, Beijing 100190, China
|
| Abstract: |
| This paper focuses on attacking the construction problem and reports research on the colluded attack construction method for free roaming mobile agent data integrity protection protocol with data integrity definition. The formal specification method, and suggests a new attack on Cheng-Wei protocol. In this attack, two colluded hosts can truncate the data collected by using a mobile agent in some probability. This kind of attack is effective on mobile agent data integrity protection protocol based on proof chain. |
| Key words: security protocol mobile agent data integrity protection protocol attack to data integrity protocol |
