摘要
文章首先简要阐述了PPPoE的工作原理和PPPoE容易受到的两种安全威胁,其次利用了合法主机和合法访问集中器都拥有用户名及其密码的特点,借助HMAC算法构建了基于挑战/应答方式的一次双向认证过程,最后给出了具体PPPoE安全性的改进方案,并进行了总结分析。
PPPoE's principles of work and its two kinds of safety threats are briefly elaborated. Taking advantage of the legal host and legal access concentrator with the property of their own specific user name and its password, and also with the help of HMAC algorithm, the program advanced in the article constructs a two-way authentication process on the basis of challenge and response. A practical PPPoE program for security improvement is given, and a thorough analysis is also given.
出处
《四川理工学院学报(自然科学版)》
CAS
2007年第4期28-30,共3页
Journal of Sichuan University of Science & Engineering(Natural Science Edition)