CIF: Small: Information transfer with guaranteed integrity

信息论安全是基于信息论中的概念和技术的使用，在通信网络上保护信息的科学。它包含对网络中潜在对手进行的窃听、模仿和替换攻击的保护。虽然窃听和模仿攻击(以及解决方案)已经得到了很好的研究，但替换攻击在日益网络化的世界中提出了新的风险，在这种攻击中，对手将来自同一来源的不同有效消息替换为来自同一来源的不同有效消息。这项工作探索了如何利用典型通信网络中经常可用的辅助信息来检查网络中潜在对手直接对原始消息进行的替换攻击。这将保证消息的信息完整性的过程从保密和认证要求中解放出来，并且更好地隔离了导致与网络拓扑相关的信息完整性的数学结构。在这项工作中开发的分离原则使人们能够更容易地将保密和身份验证重新纳入整体信息理论安全设计。信息理论网络安全的更广泛影响在电子商务、可靠的通信以及法律、专有、外交和医疗信息的保密方面日益明显。

Information-theoretic security is the science of safeguarding information across a communication network based on the use of concepts and techniques in information theory. It encompasses protection against eavesdropping, impersonation, and substitution attacks made by potential adversaries present in the network. Whereas eavesdropping and impersonation attacks (and solutions) are well studied, substitution attacks, in which the adversary replaces messages from a source by different valid messages from the same source, present new risks in an increasingly networked world. This work explores how it is possible to make use of side information that is often available in a typical communication network to check against substitution attacks made directly on raw messages by potential adversaries in the network. This frees the process of guaranteeing information integrity of the messages from the requirements of secrecy and authentication, and better isolates the mathematical structure that leads to information integrity in relation to the network topology. The separation principle developed in this work then allows one to more easily incorporate secrecy and authentication back into the overall information-theoretic security design. The broader implications of information-theoretic network security are increasingly manifest in electronic commerce, reliable communications, and confidentiality of legal, proprietary, diplomatic, and medical information.