摘要
七号信令网络由于缺乏安全机制而存在诸多安全漏洞。通过分析攻击者如何利用MTP3层的网络管理消息对七号信令网实施攻击,提出用密钥交换协议和认证头协议对MTP3层进行安全保护,从而实现了信令节点间的相互认证和对消息的完整性保护,增强了七号信令网络的安全性。
There are several security leaks in signaling system 7 （ SS7 ） networks for the lack of security mechanism. After analysing how the attacker makes use of the management messages of the MTP3 layer to attck the SS7 network, the key exchange protocol and authentication header protocol are proposed to pro- vide mutual authentication between signaling points and integrity protection of messages, and the security of SS7 network is enhanced.
出处
《电讯技术》
2008年第2期41-45,共5页
Telecommunication Engineering
基金
国家高技术研究发展863计划重大课题基金资助项目(863-317-03-01-02-20)
关键词
电信网
网络安全
七号信令
MTP3
认证
密钥交换
telecomunication network
network security
signaling system 7
MTP3
authentication
keyexchange
