一种基于LSU的数字签名OSPF方案

Digital Signature Protection of OSPF Based on LSU

OSPF路由协议是IETF提出的一种内部网关协议,是一种基于链路状态算法的动态路由协议.OSPF路由协议制定于网络安全性较好的互联网初期,因此OSPF路由协议对于众多的网络威胁不具备防护能力.所以,有必要通过额外的手段来增强OSPF路由协议的安全性.本文提出了一种基于LSU的数字签名OSPF方案,可有效防护目前针对OSPF路由协议的各种威胁和攻击.并且该方案与基于LSA的数字签名OSPF方案相比,其系统和网络开销得到了大大的降低.

OSPF routing protocol is an IGP published by IETF, it＇ s a dynamic routing protocol based on the algorithm of link state. OSPF routing protocol is established at the beginning of the Intemet. So, we should add some security function to the OSPF routing protocol to enhance it＇ s security. This paper issues a digital signature OSPF based on LSU, it can completely defend all attacks and risks. Compared with other schemes, the cost of this scheme＇ s system and network are cheaper.