一种对中间人攻击的防范策略的研究

本文针对目前出现的对PKI的中间人攻击，分析了PKI中的两种安全隐患：如果客户端不能提供身份认证或者不能获得服务器证书的有效性检验，攻击者利用中间人攻击方法就 可以完全偷听会话内容。文章还讨论了防范中间人攻击的策略，运用这种防范策略可以达到有效地防止中间人攻击的目的；最后对防范策略作了安全性分析。

Research on a Defending Strategy for Man-in-the-Middle Attacks

For a newly appeared man-in-the-middle attack to PKI, two kinds of hidden troubles of PKI are analyzed:If the client can not provide identification and can not get the verification of the server certification, the attacker can use the man-in-the-middle attack method to eavesdrop the whole communication. This paper also discusses a defending strategy, which can be used to prevent man-in-the-middle attacks effectively. Finally, the security analysis of this strategy is given.