Design and Implementation of IP Security
-
摘要: IP安全协议IPSec是一种可无缝为IP引入安全机制的协议套件,是目前唯一一种适用于所有Internet通信的安全技术,它除适用于目前的IP版本(IPv4)之外,也适用于下一代IP(IPv6).分析了IP安全协议的体系结构,对IP安全协议的实现方式、各个组成部分进行了讨论,给出了IP安全协议的实现机制及其应用方式,最后简单地探讨了IP安全协议的局限性和未来发展的方向.
-
关键词:
- 计算机网络 /
- 保密通信 /
- 通信协议 /
- IP安全协议 /
- Internet密钥交换
Abstract: IPSec is a suits of protocol that can seamless bring security into IP and it's the only one Security Protocol for all Internet traffic. Besides IPv4, the IPSec can be also used in the next generation IP——the IPv6. We analyzed the architecture of IPSec, designed an IPSec implementation in Windows NT/2000, and give some application of IPSec in Internet. Finally, we discussed the limitation and the farther development of IPSec.-
Key words:
- computer networks /
- secret communication /
- protocol /
- IPSec /
- IKE
-
[1] Kent Stephen, Atkinson Randall. RFC2401,Security architecture for the Internet protocol[S], 1998. [2] Stephen Kent, Randall Atkinson. RFC2402, IP authentication header[S],1998. [3] Kent Stephen,Atkinson Randall. RFC2406, IP Encapsulating Security Payload (ESP)[S], 1998. [4] Keith Sklower. A tree-based packet routing table for Berkeley Unix . In:USENIX Winter 1991 Technical Conference , 1991.93~104. [5] Maughan D,Schertler M,Turner J. RFC 2408, Internet Security Association and Key Management Protocol (ISAKMP)[S], 1998. [6] Carrel Dave,Harkins Dan. RFC2409, The Internet Key Exchange (IKE)[S], 1998. [7] Doraswamy Naganand,Harkins Dan. IPSec:the new security standard for the Internet, Intranet and virtual private networks[M]. Prentice Hall, 1999. -

计量
- 文章访问数: 2255
- HTML全文浏览量: 169
- PDF下载量: 1554
- 被引次数: 0