Method for enhancing multicast security

Abstract

The invention discloses a method for enhancing the multicast security. For the structural security, building an end-to-end virtual circuit from a multicast user to a server not only supports the existing security mechanism of Internet, but also has a unique security mechanism based on the network structure, namely, security is embedded. Using a virtual circuit indicator and hiding multicast address during the multicast process cause the attacker difficult to attack, so as to efficiently manage and control multicast data transmission. In addition, the multicast user qualification is validated,so the attacker cannot imitate a qualified member in a group to receive multicast data, so as to enhance the security of the multicast network.

Description

technical field [0001] The invention relates to the field of network security, in particular to a method for enhancing multicast security. Background technique [0002] The Internet has fundamentally changed the world's information infrastructure in a relatively short period of time since its inception more than 30 years ago. However, due to the continuous emergence of new applications, the abuse of the Internet, and the fact that it is gradually commercialized, the disadvantages of the Internet are gradually emerging and expanding. Among them, network security issues are the most prominent. [0003] The early methods of ensuring network security mainly focused on system vulnerability security, such as anti-virus systems, firewalls, intrusion detection systems, anti-malicious codes, and patching, and a series of security mechanisms related to system vulnerabilities. The focus of terminal security protection. However, the research on system vulnerability security cannot me...

AI Technical Summary

Problems solved by technology

[0004] Due to the characteristics of the multicast architecture, multicast communication is more vulnerable to attacks than unicast communication and has greater security risks

This is mainly reflected in: there is no restriction on membership in the group, which makes it easy for attackers to imitate as legal members of a group; the range of multicast group addresses is well known, and it is easy for attackers to find the IP address of a multicast group. And become one of its legal group members; compared with unicast communication, multicast messages will be transmitted on a wider network, which will give attackers more opportunities to intercept and eavesdrop on data messages; multicast uses UDP For communication, there is no mechanism to prevent group members or non-members from sending data to this group. If an attacker maliciously sends a large number of data packets to this group, since the group size may be relatively large, it is easy to cause network congestion and thus cause denial of service

Existing multicast routing technology is difficult to guarantee this, and secure multicast is still a technical difficulty

Images