A Method for Constructing Security Protocol Messages

Abstract

The invention discloses an efficient security protocol message generation method. An algorithm of carrying out analysis for a function trace of a security related function obtained through utilizationof a function hooking technology in security protocol implementation is provided, and the function trace is analyzed; a protocol message generation model is provided, and on the basis of a model, thesecurity protocol message generation method is provided. The message generation comprises the steps of positioning protocol message cells needing to be replaced, regenerating hijacked security function output, replacing the protocol message cells needing to be replaced in an original protocol message, and the like. The security protocol implementation security research based on the assumption that security protocol client implementation can be obtained is consistent with current application reality, so the fact that the security protocol message is constructed based on the assumption is alsoconsistent with the current research reality. According to the method, a security protocol message is constructed at a code level, so the technical scheme is feasible and has relatively high accuracyand efficiency.

Description

technical field [0001] The invention belongs to the technical field of information security, and relates to a method for constructing a security protocol message, in particular to an efficient method for constructing a security protocol message. Background technique [0002] As an important part of cyberspace security, security protocols are the key and soul of cyberspace security. Therefore, analyzing and verifying the security of security protocols running in computer networks, communication networks, and distributed systems, and discovering their logical errors and security loopholes, are crucial to ensuring cyberspace security. [0003] From security protocol design, security analysis and verification of security protocol abstract specification, to security protocol implementation (security protocol code), people mainly focus on security analysis and validation of security protocol abstract specification, which is less practical. In recent years, there has been increasi...

AI Technical Summary

Problems solved by technology

[0006] 1) Incomplete and inaccurate understanding of security protocol implementation, leading to inaccurate analysis results;

[0007] 2) The accuracy rate of specification abstraction for the implementation of security protocols is not high

Images