主动安全技术研究

The Research of Proactive Security

一、引言为保证数据的安全,密码学提供了一系列安全手段.然而,针对密码学安全机制的最常见的攻击不是通过分析密码来破译密文,而是进行系统攻击.一旦获得系统控制权,密码学中的密钥对攻击者就变成了公开信息.在现实世界里,系统攻击容易进行,是攻击者大量使用的攻击手段.

Proactive security provides a method for maintaining the overall security of a system,even when individual components are repeatedly broken into and controlled by an attacker. Proactive security is highly desirable in many realistic settings,in particular to ensure acceptable level of security using available operating systems with weakly security. We describe the proactive approach and review some methods,implementations ,and applications. We also report a practical implemention on the key proactive security mechanisms.