ORACLE7安全保密系统的通信验证

The Authentication of Communication in an ORACLE 7 Security System

阐述了在ＯＲＡＣＬＥ７安全保密系统中，为防止避开安全预处理模块而进行的攻击所采用的通信验证机制．该通信验证机制采用预先设定地址的方法使验证模块接管通信数据，并且仿照ＳＮＡ体系设计了验证框架．该通信验证机制也适用于ＵＮＩＸ平台上运行的其他客户机／服务器模型．

The communication authentication mechanism adopted in ORACLE 7 security system for the prevention of any attack bypassing the secure preprocessing module is described. In the mechanism, the method of preset address is used so that the authentication module can take over the communication data. An authentication frame according to IBMs SNA architecture is designed. The mechanism proposed is also suitable for other client server models operating on a UNIX platform.