RFID系统安全检测关键技术研究

发布时间：2018-06-07 02:27

本文选题：无线射频识别(RFID) + 安全检测　；参考：《电子科技大学》2014年硕士论文

【摘要】：近年来,物联网RFID技术飞速发展,越来越多的RFID应用需要一个能够全面评价RFID系统的安全检测体系作为保障和支撑。然而由于RFID在原始设计上的开放性及各种协议标准不统一的现实状况,目前如何有效地对RFID系统安全进行有效检测仍然是一个开放式课题。传统的RFID安全研究大多集中的安全协议改进及加密算法等防御领域,只有少量的学者关注从攻击领域来对RFID系统攻击检测或者安全防御中间件工作。为了保障RFID系统的安全性,必须研究RFID安全检测关键技术,建立一个RFID检测服务平台。本文借鉴传统网络中的攻击图建模的思想开展对RFID系统安全漏洞攻击检测以及安全等级评估的研究,针对EPC C1G2(EPC Class-1 Generation-2)标准协议设计并开发实现了一套RFID安全检测工具,满足了人们对于RFID安全等级检测的需求。本文从攻击者角度研究RFID安全检测建模问题,主要研究内容包括:(1)提出基于层次分析法的RFID安全漏洞定级策略。重点研究准则层定级指标,构造等级划分层次模型,计算安全漏洞等级划分表,确定定级步骤等。依据该策略得出RFID安全漏洞等级划分表,基于该表可实现对RFID系统漏洞攻击测试方式的安全定级需求。(2)提出基于攻击图模型的RFID安全检测方案。重点研究将攻击测试方式的分类,权限提升模式的制定,攻击图模型的设计,攻击规则的制定等,并提出一种基于权限提升的攻击图生成算法。最后对标准协议和非标准协议分别进行攻击建模分析,讨论验证本文设计的RFID攻击图模型的可行性。(3)设计和实现RFID安全检测工具。工具实现标准协议的模拟仿真通信过程,四类攻击检测方式的攻击检测过程,攻击图节点和边的动态生成,安全等级报告等功能。最后在仿真条件下进行RFID安全检测实验,有效地对攻击图模型和安全等级定级策略进行了测试和验证,进一步体现了RFID安全检测工具的实用价值。本文建立的RFID安全攻击检测模型是具备一定扩展性的,基于该模型可进行方便有效地对攻击手段扩展和升级,从而可以进一步丰富和扩展攻击测试方式。
[Abstract]:In recent years, with the rapid development of Internet of things (RFID) technology, more and more RFID applications need a security detection system that can comprehensively evaluate RFID system as a guarantee and support. However, due to the openness of the original design of RFID and the disunity of various protocol standards, how to effectively detect the security of RFID system is still an open topic. Most of the traditional RFID security researches focus on the defense areas such as security protocol improvement and encryption algorithm. Only a few scholars pay attention to the attack detection or security defense middleware of RFID system from the attack field. In order to ensure the security of RFID system, it is necessary to study the key technology of RFID security detection and establish a RFID detection service platform. Based on the idea of attack graph modeling in traditional network, this paper studies the security vulnerability detection and security grade evaluation of RFID system, and designs and implements a set of RFID security detection tools for EPC C1G2(EPC Class-1 Generation-2 standard protocol. Meet the needs of RFID security level detection. This paper studies the modeling of RFID security detection from the point of view of attackers. The main research contents include: 1) A RFID security vulnerability ranking strategy based on analytic hierarchy process (AHP) is proposed. This paper focuses on the criterion layer grading index, the construction of hierarchy model, the calculation of security vulnerability level table, and the determination of grading steps, etc. According to this strategy, the RFID security vulnerability level table is obtained. Based on this table, the security rating requirement of vulnerability testing mode in RFID system can be realized. (2) A RFID security detection scheme based on attack graph model is proposed. This paper focuses on the classification of attack testing mode, the establishment of privilege enhancement mode, the design of attack graph model and the formulation of attack rules, and proposes an attack graph generation algorithm based on privilege upgrading. Finally, the attack modeling of standard protocol and non-standard protocol is analyzed, and the feasibility of the RFID attack graph model designed in this paper is discussed. The RFID security detection tool is designed and implemented. The tool implements the simulation communication process of the standard protocol, the attack detection process of four kinds of attack detection methods, the dynamic generation of attack graph nodes and edges, the security level report and so on. Finally, the RFID security detection experiment is carried out under the simulation condition, which effectively tests and verifies the attack graph model and the security grading strategy, which further embodies the practical value of the RFID security detection tool. The RFID security attack detection model established in this paper has certain expansibility. Based on this model, the attack means can be easily and effectively extended and upgraded, which can further enrich and extend the attack testing methods.
【学位授予单位】：电子科技大学
【学位级别】：硕士
【学位授予年份】：2014
【分类号】：TP391.44;TP393.08

【相似文献】