商用密码应用安全评估多维体系构建与效能分析OA
Construction and Effectiveness Analysis of a Multi-Dimensional System for Commercial Cryptographic Application Security Assessment
商用密码应用安全性评估对保障信息系统安全和可靠性具有重要作用.针对商用密码应用中的安全性问题,文中提出了一套综合的评估体系,包括加密算法验证、随机性与机密性检测、通信协议分析、设备与证书安全检测等技术.通过采用括散列/哈希、对称/非对称加密算法验证工具、随机数生成器评估工具、通信流量分析工具等专业工具构建一个全面的安全评估框架.对100组数据进行性能测试的实验结果表明,通信检测工具在处理大规模数据时效率较高,平均耗时为1 330 s.随机性检测工具虽然准确性较高,但处理效率较低,平均耗时为4 820 s.为商用密码应用的安全评估提供了系统化的技术方案,并为实际安全防护提供了切实可行的解决策略.
The security assessment of commercial cryptography applications plays a significant role in ensur-ing the security and reliability of information systems.In view of the security issues in commercial cryptography ap-plications,this study proposes a comprehensive evaluation system,including technologies such as encryption algo-rithm verification,randomness and confidentiality detection,communication protocol analysis,and device and cer-tificate security detection.A comprehensive security assessment framework is constructed by adopting professional tools such as hash/hashing,symmetric/asymmetric encryption algorithm verification tools,random number generator evaluation tools,and communication traffic analysis tools.The experimental results of performance tests on 100 sets of data show that the communication detection tool is highly efficient when processing large-scale data,with an aver-age time consumption of 1 330 s.Although the randomness detection tool has relatively high accuracy,its process-ing efficiency is low,with an average time consumption of 4 820 s.It provides a systematic technical solution for the security assessment of commercial cryptography applications and offers practical and feasible solutions for actual se-curity protection.
李志奇;邹超
深圳市纽创信安科技开发有限公司,广东 深圳 518063深圳市纽创信安科技开发有限公司,广东 深圳 518063
信息技术与安全科学
商用密码应用安全性评估数据完整性安全评估系统可靠性性能测试安全防护加密算法验证随机数生成器
commercial cryptography application security assessmentdata integritysecurity assessmentsystem securityperformance testingsecurity protectionverification of encryption algorithmsrandom number generator
《电子科技》 2026 (8)
69-80,12
国家自然科学基金(62132013)National Natural Science Foundation of China(62132013)
评论