基于个人移动端的SSL协议安全技术与教学应用

SSL Protocol Security Technology and Teaching Application Based on Personal Mobile Terminal

随着以个人移动端为支点的移动新经济飞速发展,作为网络安全服务核心的SSL协议面临更加严峻的安全威胁,移动互联网产教协同发展迫切需要SSL协议个人移动端安全技术创新。以此为牵引,首先深入分析SSL协议体系结构和安全机制,在此基础上提出了真实网络环境下基于手机、笔记本电脑和PAD等个人移动端的SSL协议安全技术总体架构并详细说明了技术环节和个人移动端配置方法等关键技术,进而实现了移动互联网络下SSL协议X.509证书伪造和链接跳转篡改的攻击,详细阐述了攻击原理、实现流程、关键操作与配置以及数据测量与可视化分析等具体环节。疫情期间的在线实验应用表明,该技术可有效支持居家学习环境下"停课不停练",为网络安全技术创新开拓实践新途径。

With the rapid development of the new mobile economy with personal mobile terminal as the fulcrum, SSL protocol, as the core of network security service, is facing more severe security threats. The collaborative development of mobile Internet industry and education urgently needs the innovation of SSL protocol personal mobile terminal security technology. Based on the analysis of SSL protocol architecture and security mechanism, we propose the overall framework of SSL protocol security technology based on mobile phones, laptops and PAD in real network environment, and describe in detail the key technologies such as technical links and personal mobile terminal configuration method, and then realize the authentication of SSL protocol X.509 certificate in mobile Internet. The attack principle, implementation process, key operation and configuration, data measurement and visual analysis are described in detail. The online experimental application during the epidemic period shows that the technology can effectively support the "stop class and keep practicing" in the home-based learning environment, and open up a new practical way for the innovation of network security technology.