针对安全路由协议的抢先重放攻击研究

AODV路由协议在设计上缺乏安全的考虑,存在一些可用来攻击的漏洞。为了弥补各种安全缺陷,研究人员引入安全证书、数字签名和哈希链等措施增强了路由协议的安全性,有代表性的是ARAN和SAODV安全路由协议。通过对这2种协议的工作过程认真分析,发现它们在面对抢先重放攻击时仍然存在着巨大的漏洞,在建立路由时,通过抢先-重放攻击,能够跳过合法节点,形成一条不成立的伪路由。对攻击过程进行了详细分析,并给出了弥补措施。

Rushing-replay Attack on Secure Routing Protocols

Some vulnerabilities easy to be attacked exist in the design of AODV routing protocol because of the absence of security considerations to remedy these defects,the researchers introduce certificate,digital signature,hash chain to improve routing protocol security,such as ARAN and SAODV.With the analysis of the operation procedure,we find that there still a huge vulnerability under rushing-replay attack.During the establishment of a route,attacker can jump over the legitimate node through rushing-replay attack and form a false route.