MITM 공격에 안전한 P2P 신뢰전송 메커니즘의 설계
Designing Reliable P2P Transmission Mechanism Against MITM Attack
0
조회
0
다운로드
2
인용
0
참고문헌
초록
많은 인터넷응용에서 인증 및 메시지 무결성을 제공하기 위해 PKI(Public Key Infrastructure) 기반 서비스를 제공하고 있다. 그리고 몇몇 연구에서는 PKI 기반의 P2P 서비스를 제안하기도 하였다. 그러나 P2P 응용의 경우 P2P의 open, dynamic, heterogeneous, autonomous 한 특성상 PKI의 적용이 어려우며, 특히 국가간 상호운용성을 지원하지 못하는 것도 P2P에의 적용을 현실적으로 어렵게 만든다. 본 논문에서는 PKI를 사용하지 않으면서도 MITM 공격에 안전한 P2P 신뢰전송 메커니즘을 제안한다. 본 메커니즘에서 각 피어는 자신의 공개키/비밀키 쌍을 자체적으로 생성하고 분배한다. 이 경우 MITM(Man in the Middle Attack) 공격에 취약하다는 문제가 있으나, 제안한 메커니즘은 MITM 공격에 대한 안정성을 제공한다. 본 메커니즘은 P2P 기반의 파일공유, IPTV, 분산자원 공유 등 다양한 분야에 응용이 가능하다.
Abstract
Many Internet application provide the PKI(public key infrastructure)-based service to provide authentication and message integrity. Several researchers proposed PKI-based p2p network framework. However, in the real world, the use of PKI is not suitable for peer to peer network, because the peer-to-peer network is an open and dynamic network. Moreover, currently there is no nation–to-nation interoperable certificate. In this paper, we designed reliable p2p file sharing application without public key infrastructure. To do this we propose reliable public key distribution mechanism to distribute public key safely without PKI infrastructure for two-tier super-peer architecture. In our system, each peer generates and distributes its public/private key pairs, and the public key is securely distributed without PKI. The proposed mechanism is safe against MITM attack. This mechanism can be applied various P2P applications such as file sharing, IPTV, distributed resource sharing and so on
참고문헌 (9)
- K. Berket, "PKI-Based Security for Peer-to-Peer Information Sharing", Proceedings of the Fourth IEEE International Conference on Peer-to-Peer Computing (2004)
- Thomas Wolfl, "Public-Key-Infrastructure Based on a Peer-to-Peer Network", Proceedings of the 38th Hawaii International Conference on System Sciences (2005)
- LionShare P2P Profile of SAML, , Pennsylvania State University, ~ (2005)
- The Project JXTA2.0 Super-Peer Virtual Network, "T.Dengler", Sun Microsystems, ~ (2003)
- J.Gu, "Random Visitor: a Defense against Identity Attacks in P2P Overlay Networks", LNCS, 4298 (2006)
- Reidemeister, T., "Malicious Behaviour in Content-Addressable Peer-to-Peer Networks", 3rd Annual Conference on Communication Networks and Service Research, pp.319~326 (2005)
- Mudhakar Srivatsa, "Vulnerabilities and Security Threats in Structured Overlay", Proceedings of the 20th Annual Computer Security Applications Conference (ACSAC'04) (2004)
- An Analysis of the Skype Peer-to-Peer Internet Telephony Protocol, "S.A.Baset", Computer Science Department, Columbia University, ~, pp.CUCS-039-44 (2004)
- J.Risson, "Survey of research towards robust peer-to-peer networks: Search method", IRTF Internet Draft, draft-irtf-p2prg-survey-search-00.txt, ~ (2006)