Analysis and Improvement of Security in IKE
Julong Lan · Jisuanji gongcheng · 2006
This paper analyzes two security problems existing in IKE.First,before verifying the IP address of initiator,responder needs to store state and before verifying the identity of the initiator,responder needs to operate expensive computation.These two defaults in IKE combines together lead to ineffectively protection against Dos attack.Second,in the main mode or in the aggressive mode authenticated with digital signatures or with pre-shared key,IKE can’t protect the identities of both correspond sides efficiently.The improvement solves these problems existing in IKE.