Research Of WaterBox Based On Dynamic Password Authentication

According to the statistics provided by international authorities CSI and FBI, among the many attacks and incidents,the essential and most of the security incidents are information leakage. Actually, the main attackers come from the enterprise rather than from outside hackers and so on.The main security incidents caused by the economic loss is the false of the internal staffs making the information leakage unintentionally or even intentionally. Many organizations just pay attention to the external network security by setting up a quick and efficient network of devices such as firewall and IPS, which can carry out surveillance and intrusion protection against low-level attacks on communications, prevent the mainframe and personal computers from invasion, even detect a malicious executable program and cut off from the abuse of network information.The following measures are taken in some small and medium enterprises on the staff of the leakage: Prohibition of the network connection; Ban on the use of removable memory, and so on. But these are not able to solve the problem of the loss of secrets in essence, which has already been unable to meet the requirements of confidential business information.WaterBox is a security system for preventing the in-house leakage of information.However, as the first information security barrier, user's authentications are used as the network security. At present, the authentication WaterBox mainly use the traditional static passwords which are easily stolen, that is a serious threat to internal security information. Chaos is the indeterminate,pseudorandom phenomenon that appears in confirmed, macroscopically, no-linear system in some condition, and now it has become a new science rapidly. Chaos science merged into the other sciences, and was used broadly in various fieldsChaos system has good characteristics such as the evolvement of system is very sensitive to initial value, pseudorandomcity and inscrutability. The distinct characteristic is the system evolvement's sensitivity to initialvalue.Aiming at the security demand of identity authentication and the characteristcs of chaos theory, a method which once a password dynamic identity authentication based on chaos theory is proposed in this paper. Building the network transmission of VPN pathway, the non-agreement dynamic change of identity authentication is implemented, enhancing the identity authentication of WaterBox security.