OSPF路由协议的脆弱性分析.pdf

37 3 () Vol.37 No.3 2004 6 Engineering Journal of Wuhan University June 2004 :1671-8844 (2004)03-098-04 OSPF 1 1 1 2 王先培, 文云冬, 高志新, 潘汪杰 (1., 　430079;2. 　430076) :O PF(Open hortest Path First ), 、、 O PF , O PF (, ). , ., . :O PF;; :TP 393.08　　　:A Analysis of vulnerabilities of OSPF routing protocol 1 1 1 2 WANG Xian-pei , WEN Yun-dong ,GAO Zhi-xin ,PAN Wang-jie (1.chool of Electronic Information, Wuhan University, Wuhan 430079, China; 2.Wuhan Professional Technology chool of Electric Power, Wuhan 430076, China) Abstract :This paper first introduces O PF (open shortest path first)routing protocol and header format of its data packet, then it describes three parameters:link age, link sequence number and link checkout sum, as w ell as O PF routing protocol vulnerabilities.It also analyzes three O PF attack methods from outside(i.e. link sequence number attack, oldest link age attack and biggest link sequence number attack)and tw o attack methods from inside.o as how to detect one special attack, it brings out the publick key method.At last, a method using the intrusion detection system to detect the O PF routing protocol attacks is proposed. Key words:O PF (open shortest path first);vulnerability;intrusion detection 　　, , . Internet . O PF . , O PF , , O PF . , , , [ 1] , . In- . ternet 1　O PF , , ., O PF