摘要
在研究IPSec标准体系基础上,提出了一种IPSec实现方案,从IPSec协议处理、安全联盟系统和安全策略系统方面分析了该实现方案.该方案将IPsec的实现模块化为三部分,与其他实现方案比较具有易于实现,方便移植的特点,可方便地在主机、路由器或网关上配置和组合,从而有效地保证网络传输数据的安全性.
IP security is an important part of guaranteeing Internet security. IPSec make a security standard for internet. With its perfect protection mechanism IPSec will promote the development of Internet network further. After researching IPSec an implementation is given in this article. IPSec protocols process, security association system, and security policies system are analyzed in detail. With the characteristics of easy implement and transplant, this implementation can be disposed among host, router and gateway.
出处
《哈尔滨理工大学学报》
CAS
2003年第1期5-8,共4页
Journal of Harbin University of Science and Technology