SSH协议安全性分析及改进

SSH因具有良好的框架，支持多种认证通信机制，在远程访问上使用越来越广泛。文章首先介绍了SSH协议的体系框架及通信流程，分析了SSH安全特性，然后研究并指出了SSH协议存在的若干安全缺陷，详细分析了中间人攻击和击键时间间隔分析攻击，最后针对这两种缺陷提出了有效的改进方法。

Security Analysis and Improvement on SSH Protocol

As a protocol for secure remote access,SSH has nice mechanism to provide mutual authentication for both sides of correspondence,data encryption and integrity protection.However,SSH has many weaknesses.First,it is vulnerable to active man-in-the-middle attacks when users on the client without server's public key login.Second,there are serious security risks of timing analysis of keystrokes and timing attacks.This dissertation detailedly analyses these two methods of attack and points out other weaknesses of ...