|
|
 |
| |
|
|
|
Security Analysis of Deluge Code Dissemination Algorithm and Corresponding Countermeasures |
|
|
|
PP: 219S-225S |
|
|
|
Author(s) |
|
|
|
Guoping Zhang,
Mande Xie,
|
|
|
|
Abstract |
|
|
| Deluge is a classic code dissemination algorithm. Because of the widespread epidemic of Deluge, it has became the de-facto standard of the code dissemination protocol. However, Deluge does not consider any security issue and is vulnerable to lots of attacks. According to the three-stages dissemination feature of Deluge, the main attacks against it are divided into three categories: the based-advertisement attacks, the based-request attacks, and the based-updates attacks. All of them have taken the advantage of the fact that the authentication mechanisms are absent in Deluge. According to these three categories of the attacks, several authentication methods are introduced, such as a digital signature, a one-way key chain, counter and a hash chain based scheme. After all authentication methods are integrated into the Deluge, it will be immune to lots of attacks. |
|
|
|
|
|
|
|
