CAJ | 학술논문

在分析SSLVPN协议的中间人攻击原理和已有解决方案的基础上，针对目前解决方案中未考虑平台环境因素的问题，本文提出了一种基于TCM的SSI。VPN改进协议。通过改进协议数据结构，定义新的消息类型，在SSL握手协议流程中加入可信平台完整性信息和可信证书，实现了基于底层可信防止中间人攻击。
재분석SSLVPN협의적중간인공격원리화이유해결방안적기출상，침대목전해결방안중미고필평태배경인소적문제，본문제출료일충기우TCM적SSI。VPN개진협의。통과개진협의수거결구，정의신적소식류형，재SSL악수협의류정중가입가신평태완정성신식화가신증서，실현료기우저층가신방지중간인공격。
By analyzing the principles of man-in-the-middle attack for the SSL VPN protocol and its solutions, and aiming at the problem that the existing solutions have not considered the factor of platform environment, a SSL VPN improvement protocol based on TCM is proposed in the paper. By improving the data structure of the protocol data unit, defining new message types, and adding the trusted platform integrity information and trusted certificate in the handshake protocol, it can prevent the man-in-the-middle attacks based on the underlying credibility.