期刊论文

A novel lightweight protocol of secure proxy

中文

信息安全学报

2096-1146

2021

6

03

106-124

10.19363/J.cnki.cn10-1380/tn.2021.05.07

国家自然科学基金（No.61702212）资助；

本校为第一机构

随着网络技术的发展和广泛应用,在互联网环境下建立安全信道愈发显得重要。我们设计了一种采用TLSv1.3的握手协议框架的轻量级安全代理协议,在安全性的基础上提供了更好的隐蔽性和性能。代理程序的用户接口基于Socks5协议,保障了通用性。握手过程模拟TLS,将实际参数填充在TLSv1.3握手包内的随机区域和加密区域中来完成基于ECDHE密钥交换和挑战响应机制的握手。后续的代理转发过程中通过额外判断避免了加密数据的重复处理,大大提高了通信效率。针对主动检测,设计了基于TCP转发的主动对抗措施。健壮性方面,可作为服务器的反向代理,亦可作为基于TCP转发的反向代理服务器的后端,可灵活构建冗余信道。...

With the development and wide application of network technology,establishing a secure channel has been used in various application scenarios.In this paper,we have designed a lightweight security proxy protocol taking advantage of the handshake protocol framework of TLSv1.3,which provides better performance given strong security.The user interface of the agent is based on the Socks5 protocol,which guarantees the versatility.The handshake process simulates TLS,and the true parameters are filled in the random area and the encrypted area in the TLSv1.3 handshake packet to complete the handshake ba...