基于USB-Key的iSCSI身份验证安全加固

计算机科学 ›› 2015, Vol. 42 ›› Issue (Z6): 359-361.

基于USB-Key的iSCSI身份验证安全加固

郭燕,李永堂,李春杰

中国科学技术大学软件学院苏州215123;中国科学技术大学苏州研究院苏州215123,中国科学技术大学软件学院苏州215123,中国科学技术大学软件学院苏州215123;中国科学技术大学苏州研究院苏州215123

出版日期:2018-11-14 发布日期:2018-11-14
基金资助:
本文受国家基金委:基于任务行为特征分析的热敏感操作系统技术研究(61272131)资助

Improved iSCSI Authentication Based on USB-Key

GUO Yan, LI Yong-tang and LI Chun-jie

Online:2018-11-14 Published:2018-11-14

摘要/Abstract

摘要： 主要介绍了iSCSI身份认证中的安全措施及其不足,讨论其面对的安全风险,并针对协议身份验证实现中出现的问题提出了改进方案。考虑了在用户名和密码丢失的情况下,如何通过结合USB-Key的方式改进身份认证方案CHAP,提高iSCSI协议的安全等级和稳定性。实验结果证明,使用USB-Key的CHAP认证可以有效地解决多点登录,并有效提高安全等级。

Abstract: The iSCSI authentication method CHAP was introduced and analyzed,especially its security risks.Cases such as leakage of username and password were considered,and improvement was proposed.Experiments demonstrate that CHAP with USB-key can effectively prevent multi-initiators logging in with same username/password pair,and the security level and stability of iSCSI are significantly improved.

Key words: iSCSI,USB-Key,Network storage

郭燕,李永堂,李春杰. 基于USB-Key的iSCSI身份验证安全加固[J]. 计算机科学, 2015, 42(Z6): 359-361. https://doi.org/

GUO Yan, LI Yong-tang and LI Chun-jie. Improved iSCSI Authentication Based on USB-Key[J]. Computer Science, 2015, 42(Z6): 359-361. https://doi.org/

参考文献

[1] Satran J,Meth K,Sapuntzakis C,et al.Internet Small Computer Systems Interface(iSCSI).IETF RFC 3720,2004.[EB/OL].https://www.ietf.org/rfc/rfc3720.txt
[2] Simpson W.PPP Challenge Handshake Authentication Protocol.IETF RFC 1994,1996.[EB/OL].https://www.ietf.org/rfc/rfc1994.txt
[3] Leduc G.Verification of two versions of the challenge handshake authentication protocol(CHAP)[J].Annales des télé communications.Springer-Verlag,2000,55(1/2):20-30
[4] 朱坷.iSCSI存储系统中的安全性研究[D].上海:上海交通大学,2007
[5] 刘明.基于iSCSI协议的网络存储安全技术研究[D].郑州:中国人民解放军信息工程大学,2007
[6] 陈龙辉.移动PKI体系中SD安全模块的研究[D].北京:北京邮电大学,2008
[7] Vishwakarma S,Bagaria S.iSCSI Simulation Study of Storage System[C]∥Cambridge,UK,Computer Modeling and Simulation,2008,4:703-707
[8] Alaidaros H M,Rasid M F A,Othman M,et al.Enhancing Security Performance with Parallel Crypto Operations in SSL Bulk Data Transfer Phase[C]∥Penang:Telecommunications and Malaysia International Conference on Communications,2007,5:129-133
[9] Aizman A,Yusupov D.Open-iSCSI.http://www.open-is-csi.org/
[10] iSCSI target.http://iscsitarget.sourceforge.net/

Metrics

Viewed

Full text

Abstract

Cited

Shared

Discussed