智能计算机与应用
智能計算機與應用
지능계산궤여응용
Computer Study
2015年
2期
28-31
,共4页
网络安全%地址解析%重复地址检测%不可判定%等价性
網絡安全%地阯解析%重複地阯檢測%不可判定%等價性
망락안전%지지해석%중복지지검측%불가판정%등개성
Network Security%Address Resolution%Duplicate Address Detection%Undecidable Problem%Equality
地址解析协议由于缺少认证机制而容易受到攻击,比如中间人攻击,DoS攻击等,因此其安全问题长久以来一直受到人们的关注。本文对地址解析有关的两个问题进行了研究。首先,证明了地址解析问题的不可判定性,这表明所有采用判定的方式来保障地址解析过程的方法都是不完美的；其次,证明了地址解析过程与重复地址检测过程的等价性。这个结论表明地址解析过程与重复地址检测过程可以互相替代,甚至由同一过程来完成,这将大大简化地址解析协议的设计与实现。
地阯解析協議由于缺少認證機製而容易受到攻擊,比如中間人攻擊,DoS攻擊等,因此其安全問題長久以來一直受到人們的關註。本文對地阯解析有關的兩箇問題進行瞭研究。首先,證明瞭地阯解析問題的不可判定性,這錶明所有採用判定的方式來保障地阯解析過程的方法都是不完美的；其次,證明瞭地阯解析過程與重複地阯檢測過程的等價性。這箇結論錶明地阯解析過程與重複地阯檢測過程可以互相替代,甚至由同一過程來完成,這將大大簡化地阯解析協議的設計與實現。
지지해석협의유우결소인증궤제이용역수도공격,비여중간인공격,DoS공격등,인차기안전문제장구이래일직수도인문적관주。본문대지지해석유관적량개문제진행료연구。수선,증명료지지해석문제적불가판정성,저표명소유채용판정적방식래보장지지해석과정적방법도시불완미적；기차,증명료지지해석과정여중복지지검측과정적등개성。저개결론표명지지해석과정여중복지지검측과정가이호상체대,심지유동일과정래완성,저장대대간화지지해석협의적설계여실현。
Given the lack of authentication mechanisms, the address resolution protocols ( ARPs) ( address resolution pro-tocol, neighbor discovery protocol, and so on) are vulnerable to attack, such as man in the middle and denial of service a-mong others. Therefore, the safety problem of the address resolution ( AR) has been significantly given focus, and, in this paper, two problems related to AR have been investigated. First, the indecisiveness of the AR is proven. Therefore, all de-cision methods adopted to ensure the AR are imperfect;second, the equivalence between the AR and the duplicate address detection ( DAD) process is proven. Thus, the AR and the DAD process can be replaced by each other, and can even be completed by the same process which will significantly simplify the design and implementation of the ARPs.
