IPSec中密钥交换协议IKE的安全性分析与改进

Security Analysis and Improvements on IKE in IPSEC

对IKE协议的交换过程进行了安全性分析,针对Diffie-Hellman密钥交换算法易受"中间人"攻击的问题,提出了一种使用动态口令对IKE协议进行改进的方案,实验结果表明,该方案是可行的,有效的。

The paper analyzes the security issue of the exchange process of IKE protocol, revises IKE protocol of the program by dy- namic passwords for the vulnerability issue of Diffie-Hellman key exchange algorithm. The program revised proves to be feasible and ef- fective by the experiment carried out.