针对中间人攻击的IKEv2形式化分析与改进

计算机工程与应用 ›› 2012, Vol. 48 ›› Issue (2): 59-62.

针对中间人攻击的IKEv2形式化分析与改进

朱晓薇，周海刚，刘军

解放军理工大学通信工程学院，南京 210007

收稿日期:1900-01-01 修回日期:1900-01-01 出版日期:2012-01-11 发布日期:2012-01-11

Formal analysis and improvement of IKEv2 against man-in-the-middle attack

ZHU Xiaowei, ZHOU Haigang, LIU Jun

Institute of Communications Engineering, PLA University of Science & Technology, Nanjing 210007, China

Received:1900-01-01 Revised:1900-01-01 Online:2012-01-11 Published:2012-01-11

摘要/Abstract

摘要： 基于BSW逻辑对互联网密钥交换协议（IKEv2）进行了形式化分析，证明协议在预共享密钥认证方式下存在中间人攻击，提出一个改进方案，并利用扩展的BSW逻辑分析了改进后的协议能够抵御中间人攻击，且能够满足协议的认证性、秘密性和完整性。

关键词: BSW逻辑, IKEv2协议, 中间人攻击, 预共享密钥

Abstract: In this paper, Internet Key Exchange protocol（IKEv2） is analyzed formally by BSW logic. It is proved that the pre-shared key authentication in IKEv2 is susceptible to man-in-the-middle attack. An improved scheme is proposed and analyzed by extended BSW logic, which can resist man-in-the-middle attack and fulfill the authentication, secrecy and integrity of this protocol.

Key words: BSW logic, IKEv2 protocol, man-in-the-middle attack, pre-shared key

朱晓薇，周海刚，刘军. 针对中间人攻击的IKEv2形式化分析与改进[J]. 计算机工程与应用, 2012, 48(2): 59-62.

ZHU Xiaowei, ZHOU Haigang, LIU Jun. Formal analysis and improvement of IKEv2 against man-in-the-middle attack[J]. Computer Engineering and Applications, 2012, 48(2): 59-62.

[1]	许勇1，刘芬2. 异构传感网中避免中间人攻击的方案研究[J]. 计算机工程与应用, 2018, 54(22): 99-106.
[2]	王盛，崔维嘉，郑娜娥. UMTS系统空中接口接入协议的安全缺陷分析[J]. 计算机工程与应用, 2011, 47(21): 90-94.
[3]	王世峰¹，张龙军²，杨晓元^1，3. 一种基于零知识证明的互联网密钥交换协议[J]. 计算机工程与应用, 2010, 46(5): 73-75.