23 n jail 200802991
1 1 5 1.1.................................... 5 2 n 7 2.1 PSMT(Perfectly Secure Message Transmission)............ 8 2.1.1 PSMT................. 8 2.1.2 PSMT........................... 9 2.2 ASMT(Almost Secure Message Transmission)............. 10 2.2.1 ASMT................. 10 2.2.2 ASMT........................... 10 2.2.3 Basic......................... 11 2.2.4 Basic................... 11 3 FreeBSD 13 3.1 FreeBSD.................................. 13 3.2 jail..................................... 14 3.3 Vimage.................................. 15 4 16 4.1............................... 16 4.1.1 ( )............. 17 4.2................... 18 4.3.................................. 20
2 5 21 5.1 FreeBSD................... 21 5.1.1 Vimage.......................... 22 5.1.2......................... 27 6 28 29 30 34
3 1.1 n..................... 6 1.2 jail..................................... 6 2.1 n..................... 7 2.2 1-round 2-round....................... 8 3.1 jail..................................... 14 3.2 vimage................................... 15 4.1............ 19 4.2........................ 19 5.1 jail..................................... 21 5.2 vimage................................... 22 5.3 vimage 1.............................. 23 5.4 vimage 2.............................. 23 5.5........................ 26 5.6........................ 27
4 2.1 PSMT............................... 9
1 5 1 1.1 n n n n n FreeBSD OS jail Vimage
1.1 6 jail jail Vimage n 1.1 n 1.2 jail
2 n 7 2 n n n n n n n PSMT ASMT 2.1 n
2.1 PSMT(Perfectly Secure Message Transmission) 8 2.1 PSMT(Perfectly Secure Message Transmission) 2.1.1 PSMT n 2 PSMT 1. ( ) 2. 100 ( ) 1 1-round r r-round ( 4.2) n t PSMT 1-round n 3t + 1 2-round n 2t + 1 2.2 1-round 2-round
2.1 PSMT(Perfectly Secure Message Transmission) 9 2.1.2 PSMT PSMT 1993 Dolev [13] n t PSMT 1-round n 3t + 1 2-round n 2t + 1 O(n) O(2 n ) 2-round 1996 Sayeed [24] O(n 3 ) 2006 Agarwal [25] O(n) 2008 Kurosawa [26] O(n) O(n 3 ) 2-round 1-round O(n) Dolve n 3t + 1 PSMT n 3t+1 1-round n 2t+1 2-round 1-round n 2t + 1 ASMT PSMT 2-round Dolev n 2t + 1 1993 O(2 n ) Sayeed 1996 O(n 3 ) O(n) Agarwal 2006 Kurosawa 2008 O(n) O(n 3 ) 1-round n 3t + 1 O(n) 2.1 PSMT
2.2 ASMT(Almost Secure Message Transmission) 10 2.2 ASMT(Almost Secure Message Transmission) 2.2.1 ASMT ASMT 1. ( ) 2. 1 δ ( ) 3. δ failure ( ) 4. t ( ) PSMT 2 1 δ 3 2.2.2 ASMT ASMT 2004 Srinathan [14] 2007 Kurosawa [15] n = 2t + 1 X i ( S 1)/δ + 1 (2.1) X i channel(i) S δ
2.2 ASMT(Almost Secure Message Transmission) 11 Kurosawa ϵ X i = S 1 δ + 1 > S 1 ϵ + 1 ϵ = n t + 1 n t t + 1 δ 2.2.3 Basic Kurosawa Basic 2.2.4 Basic Basic H Second Preimage Attack t Second Preimage Attack ϵ ϵ [ H SecondP reimageattack ] t (2.2) H h 2 h H ( ) H Second Preimage Attack 1/2 h (4.2) ϵ t 2 h (2.3)
2.2 ASMT(Almost Secure Message Transmission) 12 s q S S = 2 q (2.4) ( (4.1)) (4.3) (4.4) X i S 1 ϵ + 1 2q 1 t/2 + 1 = 2h (2 q 1) + 1 (2.5) h t Basic X i (4.5) log 2 log 2 X i log 2 { 2 h (2 q 1) t + 1 } { 2 h (2 q } 1) log 2 t = log 2 2 h + log 2 (2 q 1) log 2 t h + q log 2 t (2.6) X i ch-i f(i) H(f(1)) H(f(n)) s q f(i) q h X i q + hn (5.5) q + hn = log 2 X i h + q log 2 t hn h Basic Basic [6]
3 FreeBSD 13 3 FreeBSD 3.1 FreeBSD FreeBSD UNIX OS FreeBSD 4.3BSD Net/2 OS 4.4BSD-Lite FreeBSD FreeBSD BSD FreeBSD 9.0-RELEASE FreeBSD9.0-RELEASE [1] [2] [3]
3.2 jail 14 3.2 jail jail FreeBSD jail OS jail FreeBSD jail jail jail 1. : jail FreeBSD jail jail 2. jail jail 3. : jail [4] 3.1 jail FreeBSD FreeBSD 3.1 jail
3.3 Vimage 15 3.3 Vimage Vimage FreeBSD Vimage FreeBSD8.0-RELEASE FreeBSD FreeBSD IP 1 FreeBSD FreeBSD [5] 3.2 vimage
4 16 4 4.1 ( )
4.1 17 4.1.1 ( ) IP TCP/IP IP IP IP IP IP IP 1. 2.
4.2 18 4.2 TCP/IP TCP/IP (strict source routing) (loose source routing) 2 6.1 6.2
4.2 19 4.1 4.2
4.3 20 4.3 0 8 16 24 31 + + + + + IP v e r s hdr l e n TOS t o t a l l e n g t h / fragment l e n g t h + + + + + + + 32 i d number R DF MF fragment o f f s e t + + + + + + 64 t t l p r o t o c o l header checksum + + + 96 s r c IP + 128 dst IP + 160 o p t i o n s f i e l d ( var. l e n g t h max. 40b 0 padding to 4b mult. ) + DATA ( z e r o padding to 4 byte m u l t i p l e ) + + IP 0 7 8 15 16 23 24 31 + + + + + Source D e s t i n a t i o n Port Port + + + + + Length Checksum + + + + + data + + UDP IP UDP 6.2 [6]
5 21 5 5.1 FreeBSD n FreeBSD jail Vimage n jail Vimage jail FreeBSD jail jail Vimage jail 5.1 jail
5.1 FreeBSD 22 5.2 vimage 5.1 jail Vimage 5.2 jail Vimage n FreeBSD9.0-RELEASE 5.1.1 Vimage FreeBSD jail Vimage 5.3 usr/src/sys/amd64/conf/generic 5.4 GENERIC, make KERNCONF=GENERIC buildkernel make KERNCONF=GENERIC installkernel Vimage [5]
5.1 FreeBSD 23 5.3 vimage 1 5.4 vimage 2
5.1 FreeBSD 24 jail /usr/src mkdir /usr/local/jails make buildworld make installworld DESTDIR=/usr/local/jails/test1 make distribution DESTDIR=/usr/local/jails/test1 make installworld DESTDIR=/usr/local/jails/test2 make distribution DESTDIR=/usr/local/jails/test2 make installworld DESTDIR=/usr/local/jails/test3 make distribution DESTDIR=/usr/local/jails/test3 make installworld DESTDIR=/usr/local/jails/test4 make distribution DESTDIR=/usr/local/jails/test4 [12] test1 4 jail jail test #!/bin/bash sysctl -w security.jail.socket unixiproute only=0 sysctl -w security.jail.allow raw sockets=1 for i in 1 2 3 4; do jail -c vnet host.hostname=test$i name=vm$i path=/usr/jails/test$i persist mount -t devfs devfs /usr/local/jails/test$i/dev mount -t procfs proc /usr/local/jails/test$i/proc jexec test$i sysctl -w net.inet.ip.forwarding=1 jexec test$i ifconfig lo0 127.0.0.1/24 up jexec test$i /etc/rc.d/sshd onestart jexec test$i routed -s -m done [5] chmod +x jail
5.1 FreeBSD 25 jail ifconfig epair create ifconfig epair0a vnet test1 ifconfig epair0b vnet test2 jexec test1 ifconfig epair0a 10.0.10.1/24 up jecec test2 ifconfig epair0b 10.0.10.2/24 up ifconfig epair create ifconfig epair1a vnet test1 ifconfig epair1b vnet test3 jexec test1 ifconfig epair1a 10.0.20.1/24 up jecec test3 ifconfig epair1b 10.0.20.2/24 up ifconfig epair create ifconfig epair2a vnet test2 ifconfig epair2b vnet test4 jexec test2 ifconfig epair2a 10.0.30.1/24 up jecec test4 ifconfig epair2b 10.0.30.2/24 up ifconfig epair create ifconfig epair3a vnet test3 ifconfig epair3b vnet test4 jexec test3 ifconfig epair3a 10.0.40.1/24 up jecec test4 ifconfig epair3b 10.0.40.2/24 up # jail [5]
5.1 FreeBSD 26 jexec test1 ping -c 3 10.0.10.2 # test1-test2 jexec test1 ping -c 3 10.0.20.2 # test1-test3 jexec test2 ping -c 3 10.0.30.2 # test2-test4 5.5
5.1 FreeBSD 27 5.1.2 5.6 jail 5.5 test1,test2,test3,test4 4
6 28 6 jail jail n jail 1000
29 2012 2
30 [1] The FreeBSD Project http://www.freebsd.org/ja/ [2] FreeBSD http://e-words.jp/w/freebsd.html [3] FreeBBSD wikipedia http://ja.wikipedia.org/wiki/freebsd [4] FreeBSD jail wikipedia http://ja.wikipedia.org/wiki/freebsd jail [5] hasegaw blog http://d.ballade.jp/blog/2011/01/freebsd-vimage.html [6] n [7] FreeBSD jail http://www.kishiro.com/freebsd/jail.html [8] FreeBSD http://news.mynavi.jp/articles/2009/11/24/freebsd80/index.html [9] massi s easy laboratory http://www.massi.mydns.jp/massis easy laboratory/2009/10/jail.h [10] jail manual http://www.nxmnpg.com/ja/8/jail [11] wikipedia http://ja.wikipedia.org/wiki/ [12] jail vimage http://www.nisoc.or.jp/ ishimoto/study/20091205/jail vimage.pdf
31 [13] DANNY DOLEV CYNTHIA DWORK ORLI WAARTS MOTI YUNG Perfectly Secure Message Transmission Journal of the Association for Computing Machinery Vol.40,No.1 pp.17-47(1993) [14] K. Srinathan Arvind Narayanan C. Pandu Rangan Optimal Perfectly Secure Message Transmission CRYPTO 2004 LNCS 3152 pp.545-561(2004) [15] Kaoru KUROSAWA Kazuhiro SUZUKI Members Almost Secure (1- Round,n-Channel) Message Transmission Scheme IEICE TRANS. FUNDAMENTALS VOL.E92-A,NO.1(2009) [16] (2004) [17] (1997) [18] http://www2.cc.niigata-u.ac.jp/ takeuchi/tbasic/background/- Cong.html [19] (2007) [20] (2004) [21] (2004) [22] Douglas R. Stinson (1996) [23] DOUGLAS R. STINSON CRYPTOGRAPHY THEORY AND PRACTICE THIRD EDITION Chapman & Hall/CRC(2006) [24] HASAN MD. SAYEED HOSAME ABU-AMARA Efficient Perfectly Secure Message Transmission in Synchronous Networks
32 INFORMATION AND COMPUTATION 126 pp.53-61(1996) ARTICLE NO.0033 [25] Saurabh Agarwal Ronald Cramer Robbert de Haan Asymptotically Optimal Two-Round Perfectly Secure Message Transmission CRYPTO 2006 LNCS 4117 pp.394-408(2006) [26] Kaoru Kurosawa Kazuhiro Suzuki Truly Efficient 2-Round Perfectly Secure Message Transmission Scheme Advances in Cryptology EUROCRYPT 2008 LNCS 4965 pp.324-340(2008) [27] as3crypto http://code.google.com/p/as3crypto/ [28] W. UNIX 2 Vol.1 API: XTI 1999 [29]. [ ] TCP/IP Vol.1 2000 [30]. [ ] TCP/IP Vol.2 2002 [31] Linux 2010 [32] ichael J.Donahoo Kenneth L. Calvert TCO/IP C 2003
33 [33] TCP/IP 2 2004 [34] 2 2006
34 jail 4 700 4 3 4 4 700 700