论文信息 - A secure address resolution protocol

A secure address resolution protocol

We propose an architecture for securely resolving IP addresses into hardware addresses over an Ethernet. The proposed architecture consists of a secure server connected to the Ethernet and two protocols: an invite-accept protocol and a request-reply protocol. Each computer connected to the Ethernet can use the invite-accept protocol to periodically record its IP address and its hardware address in the database of the secure server. Each computer can later use the request-reply protocol, to obtain the hardware address of any other computer connected to the Ethernet from the database of the secure server. These two protocols are designed to overcome the actions of any adversary that can lose sent messages, arbitrarily modify the fields of sent messages, and replay old messages.

Chin-Tser Huang | Mohamed G. Gouda

[1] Ralph E. Droms,et al. Dynamic Host Configuration Protocol , 1993, RFC.

[2] Marvin Theimer,et al. A Reverse Address Resolution Protocol , 1984, RFC.

[3] Marco de Vivo,et al. Internet security attacks at the basic levels , 1998, OPSR.

[4] David C. Plummer,et al. Ethernet Address Resolution Protocol: Or Converting Network Protocol Addresses to 48.bit Ethernet Address for Transmission on Ethernet Hardware , 1982, RFC.

[5] John Braun,et al. Internet security , 2001 .

[6] Smoot Carl-Mitchell,et al. Using ARP to implement transparent subnet gateways , 1987, RFC.

[7] M. Bellare,et al. HMAC: Keyed-Hashing for Message Authentication, RFC 2104 , 2000 .

[8] B. Yener,et al. Internet Security , 2003 .

[9] Mohamed G. Gouda. Elements of network protocol design , 1998 .

[10] Ronald L. Rivest,et al. The MD5 Message-Digest Algorithm , 1992, RFC.

[11] Hugo Krawczyk,et al. HMAC: Keyed-Hashing for Message Authentication , 1997, RFC.

[12] Martín Abadi,et al. A logic of authentication , 1989, Proceedings of the Royal Society of London. A. Mathematical and Physical Sciences.