QQ客服 官方微博 反馈留言

	IPSec和IP Filter在路由器中部署策略的研究
	王利 ; 徐明伟 ; 徐恪 ; Wang Li ; Xu Mingwei ; Xu Ke
	2010-06-09 ; 2010-06-09
关键词	IPSec IP Filter 路由器 部署策略 IPSec IP Filter router deployment approach TN915.08
其他题名	On the Deployment Approach of IPSec and IP Filter in Routers
中文摘要	IPSec和IP Filter是IPv6路由器中的重要安全部件.IPSec的安全关联查找引擎具有类似于IPFilter的功能,也需要对IP包进行过滤和匹配,路由器中流动的IP包可能需要经过这两个部件的重复过滤,因此,这两个部件之间的部署策略将会直接影响到IP包的处理效率.从路由器整体安全的角度分析了两个安全部件之间的相互关系,提出了一个新的部署策略.与国际上著名的开放源码IPv6协议栈KAME相比较,该部署策略可以提高IPSec的处理效率,减轻IP Filter对IPSec的负面影响,同时,也减少了IP包在路由器中的重复过滤,提高了IP包的处理效率.; IPSec and IP Filter are among the most important security modules of IPv6 routers. Similar to the function of IP Filter, the security-association query engine of IPSec also needs filtering and matching the IP packages. The IP packages flowing inside the router could be filtered by IP Filter and IPSec for more than once. Thus, the method of deployment between the two modules will have direct influence on the processing performance of IP packages. In this work, the inter-relationship between the two security modules is given in a perspective of router global security. Moreover, a novel deployment approach is proposed. Compared with the open-source IPv6 protocol stack KAME, the improved processing performance of IPSec is obtained and the negative influence of IP Filter on the IPSec is reduced. Meanwhile, the duplicated IP package filtering within the routers is reduced to improve the processing performance of IP package.; 国家自然科学基金项目(90104002,60373010); 国家“九七三”重点基础研究发展规划基金项目(2003CB314801)~~
语种	中文 ; 中文
内容类型	期刊论文
源URL	[http://hdl.handle.net/123456789/56327]
专题	清华大学
推荐引用方式 GB/T 7714	王利,徐明伟,徐恪,等. IPSec和IP Filter在路由器中部署策略的研究[J],2010, 2010.
APA	王利,徐明伟,徐恪,Wang Li,Xu Mingwei,&Xu Ke.(2010).IPSec和IP Filter在路由器中部署策略的研究..
MLA	王利,et al."IPSec和IP Filter在路由器中部署策略的研究".(2010).

个性服务

查看访问统计

相关权益政策

暂无数据

收藏/分享

除非特别说明，本系统中所有内容都受版权保护，并保留所有权利。