SNMPV3下的安全机制研究

SNMPV3 Security Mechanism under Study

在SNMPV1、V2中,安全问题始终没有得到很好地解决,只是利用了commuinty(团体名)作为鉴别管理者权限的唯一标准,决定是否用户有读写权限。另一个缺陷是在数据包中用明文传递。为此,在SNMPV3(RFC2271到RFC2275)提供了一系列的安全机制,针对网络管理中可能存在的安全隐患提出了一系列的安全模型,该文主要讲述了SNMPv3的安全机制,集中讨论了V3的USM和安全模型和VACM访问控制的问题。

In SNMPV1、V2,Security is a problem which hasn’t been settled well, the only authentication standard is "community" , it is used to decided that the user has the privilege to read or write , and the other defect is that the data package is transmited in plain text. So a series of security mechanisms come into being in SNMP V3 ( from RFC2271 to RFC2275), it provides some security models according to the possible security problems on network management . In this article ,we narrate the security mechanics and focus on the USM and VACM.