由于通航申报信息属于航运的核心数据资产,必须确保其数据安全。针对当下传输加密敏感性不足、信息量丢失过大的问题,开展基于超文本传输安全协议(hypertext transfer protocol secure,HTTPS)和映射混沌算法的信息交互传输研究。该研究...由于通航申报信息属于航运的核心数据资产,必须确保其数据安全。针对当下传输加密敏感性不足、信息量丢失过大的问题,开展基于超文本传输安全协议(hypertext transfer protocol secure,HTTPS)和映射混沌算法的信息交互传输研究。该研究首先基于HTTPS建立通航申报信息加密传输通道,再将通航申报信息分割为前景和背景部分,选择两种不同的混沌系统分别实施混沌映射加密。结果表明:经本研究方法加密后,明文敏感性相对更大、信息熵差值相对更小,基于HTTPS协议和映射混沌算法的信息交互传输加密效果更好。展开更多
The DNS over HTTPS(Hypertext Transfer Protocol Secure)(DoH)is a new technology that encrypts DNS traffic,enhancing the privacy and security of end-users.However,the adoption of DoH is still facing several research cha...The DNS over HTTPS(Hypertext Transfer Protocol Secure)(DoH)is a new technology that encrypts DNS traffic,enhancing the privacy and security of end-users.However,the adoption of DoH is still facing several research challenges,such as ensuring security,compatibility,standardization,performance,privacy,and increasing user awareness.DoH significantly impacts network security,including better end-user privacy and security,challenges for network security professionals,increasing usage of encrypted malware communication,and difficulty adapting DNS-based security measures.Therefore,it is important to understand the impact of DoH on network security and develop newprivacy-preserving techniques to allowthe analysis of DoH traffic without compromising user privacy.This paper provides an in-depth analysis of the effects of DoH on cybersecurity.We discuss various techniques for detecting DoH tunneling and identify essential research challenges that need to be addressed in future security studies.Overall,this paper highlights the need for continued research and development to ensure the effectiveness of DoH as a tool for improving privacy and security.展开更多
中间人攻击是网络攻击的一种常用手段,其中超文本传输安全(Hypertext Transfer Protocol Secure,HTTPS)协议的中间人攻击危害较大,已有检测方法主要面向单客户端,以证书匹配验证为主要手段,部署成本和性能开销较高。通过分析SSL(Secure ...中间人攻击是网络攻击的一种常用手段,其中超文本传输安全(Hypertext Transfer Protocol Secure,HTTPS)协议的中间人攻击危害较大,已有检测方法主要面向单客户端,以证书匹配验证为主要手段,部署成本和性能开销较高。通过分析SSL(Secure Sockets Layer)握手阶段的密钥协商、证书验证等关键报文,提出基于时间特征的HTTPS中间人攻击检测方法,从流量角度提供了一种检测思路,具有更广泛的适用场景。实验结果表明,该方法在互联网环境测试数据集下具有较高的准确率。展开更多
文摘由于通航申报信息属于航运的核心数据资产,必须确保其数据安全。针对当下传输加密敏感性不足、信息量丢失过大的问题,开展基于超文本传输安全协议(hypertext transfer protocol secure,HTTPS)和映射混沌算法的信息交互传输研究。该研究首先基于HTTPS建立通航申报信息加密传输通道,再将通航申报信息分割为前景和背景部分,选择两种不同的混沌系统分别实施混沌映射加密。结果表明:经本研究方法加密后,明文敏感性相对更大、信息熵差值相对更小,基于HTTPS协议和映射混沌算法的信息交互传输加密效果更好。
基金Deanship of Scientific Research at King Khalid University for funding this work through a large group Research Project under Grant Number RGP.2/373/45.
文摘The DNS over HTTPS(Hypertext Transfer Protocol Secure)(DoH)is a new technology that encrypts DNS traffic,enhancing the privacy and security of end-users.However,the adoption of DoH is still facing several research challenges,such as ensuring security,compatibility,standardization,performance,privacy,and increasing user awareness.DoH significantly impacts network security,including better end-user privacy and security,challenges for network security professionals,increasing usage of encrypted malware communication,and difficulty adapting DNS-based security measures.Therefore,it is important to understand the impact of DoH on network security and develop newprivacy-preserving techniques to allowthe analysis of DoH traffic without compromising user privacy.This paper provides an in-depth analysis of the effects of DoH on cybersecurity.We discuss various techniques for detecting DoH tunneling and identify essential research challenges that need to be addressed in future security studies.Overall,this paper highlights the need for continued research and development to ensure the effectiveness of DoH as a tool for improving privacy and security.
