基于中间人攻击的SSL VPN运行参数深度检测∗

摘要

For its convenient deployment and security, SSL VPN now becomes the mainstream solution of remote access market, and thus is widely applied in e-Commerce and e-Government fields. Based on a deep analysis of SSL certificate verification mechanism, a method for SSL VPN parameters test based on active MITM attack technology is proposed, thus to implement operational parameters test of SSL VPN devices,and the test results may be used in management and assessment of SSL VPN devices by supervisory authori￣ties.%SSL VPN以其部署简单、安全可靠的优势成为目前远程接入市场上的主流方案，被广泛应用于电子商务、电子政务等领域。文中在深入分析了SSL证书验证机制的基础上，通过采用主动式的中间人攻击方式，提出了一种SSL VPN深度检测的方法，实现了对于SSL VPN产品运行参数的深度检测，这些检测信息可进一步被监管机构用于对SSL VPN产品的管理和评估。