Dissertation > Excellent graduate degree dissertation topics show

Research and Implementation of SSL-based VPN

Author: LiuHongQiang
Tutor: LiDaXing
School: Shandong University
Course: System Analysis and Integration
Keywords: SSL protocol Virtual Private Network (VPN) Proxy Tunnel OpenVPN
CLC: TP393.08
Type: Master's thesis
Year: 2008
Downloads: 845
Quote: 12
Read: Download Dissertation

Abstract

With the development of Internet technology, more and more enterprises and departments will conduct its business on the Internet, which directly led to the growth in demand for information security products. In recent years, market research reports, VPN market is growing by leaps and bounds. Because IPsec VPN gradually appearing in the application of the deficiencies (eg, conflicts with NAT device, configure and use complex, to the operating system kernel brings security risks and other), people began to seek more secure and easy to use VPN technology. SSL-based VPN protocol is the most interesting of an emerging VPN technology. However, due to lack of uniform standards and norms, based on the current market SSL protocol VPN products (commonly known as SSL VPN), technology uneven, functional differences, which gives the choice of VPN products difficult. In addition, due to the United States on the export of cryptographic products control restrictions, the standard SSL protocol, the key length is shorter, and thus its security strength has been greatly weakened, does not meet the security requirements in the country some of the higher areas (such as government , military, financial, etc.) applications. Therefore it is necessary for SSL-based VPN technology agreements depth and systematic research and improved. Firstly, combined with the security of the SSL protocol analyzes SSL protocol support for VPN implementation, summed up a VPN based on the characteristics of the SSL protocol is proposed based on the SSL protocol is divided into agent-based VPN SSL VPN and SSL VPN tunnel-type two categories . VPN and SSL protocol in the application should be noted that the problem are summarized. Agent-based SSL VPN feature is agent-based technology and \This paper studies the agent-based SSL VPN technology principle; summarizes the agent-based SSL VPN supported application types, and for different types of applications used by the agent technology has been studied; analyze agent-based SSL VPN client security flaws and propose a solution; summarizes the agent-based SSL VPN strengths, weaknesses and possible applications. SSL VPN tunnel-type technology based on virtual NIC, which runs the two sides need to communicate install VPN software, through a virtual network card created for secure data transmission tunnel. This paper studies the SSL VPN tunnel-type technical principles; detailed description of the principle of virtual network card; SSL VPN tunnel type may occur in TCP over TCP tunnel data encapsulation way to bring issues are discussed and solutions are given ; summarizes the agent-based SSL VPN strengths, weaknesses and possible applications. This paper proposes a support domestic final cryptographic devices and algorithms based VPN SSL protocol implementations. The program is based on proven open source project OpenVPN VPN tunnel type achieved through custom OpenSSLEngine achieve cryptographic devices and algorithms for domestic calls to compensate for the standard SSL protocol key strength is weak defects. Such programs not only meet the domestic demand for SSL-based VPN protocol application needs, but also to speed up the development progress, reducing the cost to build VPN. To sum up, the main research work (innovation) include: (1) summarize a VPN based on the characteristics of the SSL protocol is proposed based on the SSL protocol is divided into agent-based VPN SSL VPN and SSL VPN tunnel-type two categories. (2) the agent-based SSL VPN and SSL VPN tunnel-type key technology for the systematic research, analyzes its own advantages and disadvantages, summed up its own applicable occasions and supported applications. (3) proposed a cryptographic device support domestic and algorithms based VPN SSL protocol implementations. I participated in during the reading SSL VPN pre-research project of great help for the completion of this article.

Related Dissertations

CLC: > Industrial Technology > Automation technology,computer technology > Computing technology,computer technology > Computer applications > Computer network > General issues > Computer Network Security
© 2012 www.DissertationTopic.Net Mobile