【摘要】 本文分析了SSL协议的握手协议中密钥交换方式及匿名交换的不安全性,提出了用认证协议Kerberos来进行认证的设计思想。对于SSLVPN系统存在的安全风险,提出用Kerberos认证方法对SSLVPN设计方案进行改进,从而有效地提高了SSLVPN系统的安全性。更多还原

【Abstract】 This paper analyzes the key exchange method and the insecurity of anonymous commutation in the handshake agreement of the SSL agreement, puts forward the design ideas of using the attestation agreement of Kerberos to carry on attestation. In the end, for the risks in the system of SSL VPN, we use the Kerberos attestation method to improve the project of SSL VPN, thus effectively improve the safety of the SSL VPN system.更多还原