匿名通信链路安全性测试方法

发布时间：2018-10-26 21:39

【摘要】：当前,互联网正迅猛发展,信息安全受到的威胁日益增多,隐私保护变得愈加重要。隐私保护的手段繁多,其中匿名通信是目前互联网上保护用户隐私的一种重要手段,它能够有效防御攻击者的监听和流量分析攻击。但是匿名通信系统也不是绝对安全的,其应用广泛的同时,相关研究和攻击也越来越多。匿名通信系统的意义在于通过数据的多节点传输以及数据的加密来隐藏通讯双方的重要信息,而在此过程中,如果攻击者能够得到通讯的整条链路,就能够得到通讯双方的IP、端口等基本信息,进而获得其他重要信息,所以匿名通信系统的链路安全是非常重要的。本文调研了匿名通信系统的发展历程,当前国内外的研究现状,以及匿名通信系统在链路安全方面的受到的威胁和防御手段,通过研究某匿名通信系统的具体通信过程,以及通信数据在整个通信过程中的封装过程,基于数据包分组和数据传输方式,制定了两种针对链路安全性的对抗性测试方法。在互联网搭建了一个匿名通信系统,并在此基础上进行了对抗性测试,即在获取部分节点的基础上能否探知某个节点所处的前后节点,从而获得测试节点所在的完整链路。对两种测试方法的测试结果进行了破坏性和准确性分析,两种测试方法对匿名通信系统的具体影响,以及各个节点的识别情况。
[Abstract]:At present, the Internet is developing rapidly, the threat to information security is increasing day by day, privacy protection becomes more and more important. There are many ways to protect privacy, among which anonymous communication is an important means to protect users' privacy on the Internet. It can effectively defend against attackers' interception and traffic analysis attacks. However, anonymous communication system is not absolutely secure, and it is widely used, and there are more and more related researches and attacks. The significance of anonymous communication system is to hide the important information of both parties through the multi-node transmission of data and the encryption of data. In the process, if the attacker can get the whole link of communication, he can get the IP, of both sides of the communication. So the link security of anonymous communication system is very important. This paper investigates the development of anonymous communication system, the current research situation at home and abroad, and the threats to the link security of the anonymous communication system and the defense measures, through the study of the specific communication process of an anonymous communication system. And the encapsulation process of communication data in the whole communication process. Based on packet grouping and data transmission, two antagonistic testing methods for link security are developed. An anonymous communication system is built on the Internet, and a confrontational test is carried out on this basis, that is, whether or not the nodes can be detected before and after the nodes are located on the basis of obtaining some nodes, and the complete link of the test nodes can be obtained. The destructive and accuracy analysis of the test results of the two testing methods, the concrete influence of the two testing methods on the anonymous communication system, and the recognition of each node are given.
【学位授予单位】：哈尔滨工业大学
【学位级别】：硕士
【学位授予年份】：2017
【分类号】：TP309

【参考文献】