Research On Secure OSPF Protocol Based On NTRU Algorithm

Now OSPF is one of the protocols that have been the most widely used in Internet and Intranet, with the fast development of Internet technology in the world. OSPF is a typical kind of link state routing protocol, with which routers obtains routing information through exchanging link state advertisement. However, many routers don't authenticate each other, or only use simple password scheme to access control. Attackers can capture OSPF packets to obtain simple password and forge LSA data package. This thesis analyzed the security of OSPF protocol, and proposed a new secure OSPF protocol-SOSPE Compared with other related researches about OSPF, SOSPF has better time performance and security.Firstly, this thesis introduced the action and classifying of route protocols briefly, especially introduced the basic framework and the implementation principles of OSPF. Then this thesis introduced some cryptography algorithms, such as NTRUSign signature algorithm.Secondly, this thesis analyzed the weakness of OSPF protocol in security. Then improved existing insecure OSPF protocol, and proposed a new secure OSPF protocol SOSPF based on NTRUSign digital signature mechanism.Thirdly, this thesis used extended NS2 simulation platform to simulate SOSPF protocol under Linux operating system.At last, this thesis verified the security of the SOSPF formally by AVISPA, in which the protocol model was establish and analyzed with HLPSL.The innovative points in this thesis are as follows:1. This thesis proposed a new secure OSPF protocol SOSPF based on NTRUSign digital signature mechanism, aimed at the weakness in security which lie in OSPF protocol.the SOSPF provided such security services as reality, integrity, Non-repudiation and anti-replay.2. This thesis used the well know international simulation software NS2 to simulate SOSPF protocol under Linux operation system. First of all, added SOSPF protocol into NS2 family to extend NS2 simulation software. Then used the extended NS2 simulation platform to simulate SOSPF protocol in different scenes of networks, the results show that SOSPF protocol used the newest NTRUSign digital signature algorithm has better time performance than that used the most popular RSA digital signature algorithm.3. This thesis used international universal AVISPA software to carry through formalized validation on security of SOSPF protocol under Linux operation system. The test result demonstrates that SOSPF protocol can perform better in security.