Dissertation > Excellent graduate degree dissertation topics show

IPSec VPN in key technologies

Author: LiLi
Tutor: LiDaXing
School: Shandong University
Course: System Analysis and Integration
Keywords: Virtual Private Network IPSec Generic Routing Encapsulation Policy-related Security Policy Database
CLC: TP393.08
Type: Master's thesis
Year: 2008
Downloads: 356
Quote: 0
Read: Download Dissertation

Abstract


With the Internet in today's society is a widely used, the security and confidentiality of information are becoming increasingly important, network security products are also people pay attention to it. Virtual Private Network VPN system is primarily used in an insecure network environment in order to open up a secure tunnel for data transmission in the network application of the product plays an important share. Since the IETF IPSec formalized as an open network layer security protocol later, IPSec VPN creation is introduced into the program in the past, since, IPSec VPN technology security research started to become a key issue. Traditional IPSec VPN system is simple and efficient, able to meet the most basic needs of network security, but there are some limitations. IPSec VPN for practical application problems, through practical work on understanding and IPSec VPN, this paper focus on the following three aspects discussed: 1) support for multicast applications. IPSec protocol is essentially applies only to unicast security, does not apply to the recipient not only multicast environment. In view of the excellent characteristics of the IPSec protocol, hoping it would be applied to multicast environment, we use the Generic Routing Encapsulation (GRE) tunnel combined with IPSec encryption methods to solve this problem, the application of the star-shaped structure may encounter problems and how to solve. 2) Policy Database (SPD) organizational structure improvements. IPSec security policy is an important component of the architecture, the core of which is expressed and implementation strategies. Among them, the \For incoming and outgoing IP packet processing security policy stored in the Security Policy Database (SPD) in. Because for each datagram to be processed must be query processing, therefore, SPD organizational structure IPSecVPN directly on the efficiency of the system greatly. In practical applications, the SPD query speed requirements are often very high, especially in a complex network environment, because the SPD's source address, destination address field can be both a host address, it could be a subnet address, query its very high complexity. We have the spirit to improve query efficiency for the purpose of multi-branch Trie tree were used and Radix tree two kinds of tree structure to achieve strategic organizational structure of the database, and conduct their own comparative advantages and disadvantages. 3) the correlation processing strategy. Number of internal nodes each using different security policies may intertwined, to correct the correlation between processing strategies. Correlation analysis of the strategy to analyze the solutions, in-depth understanding of how to make policy in a complex system can handle large network environment influence each other's security policy. In addition, IPSec VPN network for the next article proposed a \Because the VPN system configuration relative to the average user, more professional, in practical applications often encountered due to policy inconsistency caused VPN connectivity issue. IPSecVPN system security policy server mainly to the VPN network policy management together, and unified by the network administrator to configure and manage, in order to avoid possible policy inconsistencies. This article is about the IPSec VPN makes people have a more clear understanding, let IPSec VPN system can better serve the cause of network security. Graduate student, he worked in Jinan City, De VPN Computer Technology Co., Ltd. R \u0026 D Center Department of internships, participation in multiple IPSec VPN-related research and development projects, as the subject of writing provides a practical basis.

Related Dissertations

  1. Encryption Card Application of Embedded Hardware Firewall Based on IPsec VPN,TP393.08
  2. Study and Implement of VPN Penetrating NAT Based on IPSec Protocol,TP393.08
  3. The multi-core network processor P4080 Research and Implementation of IPSec protocol,TP393.08
  4. Research and Implementation on Authentication Encryption Process of TD-SCDMA Femto HNB,TN929.533
  5. Lightweight IPsec in embedded systems design and implementation,TP368.1
  6. The Study of VPN Technology in Enterprise Applications,TP393.1
  7. Research on high-speed IPv6 IPsec security gateway,TP393.08
  8. Study on Optical Virtual Private Networks in a Wavelength Division Multiplexing Passive Optical Network,TN929.1
  9. The Design and Implementation of A Hot Standby System on IPsec VPN,TP393.1
  10. SSL VPN Based on the Agreement in the Application and Realization of Campus Network,TP393.18
  11. The Research of IPSec Tunneling Based on Routing Switch Technology,TP393.08
  12. IPsec-based remote access to corporate network systems design and implementation,TP393.08
  13. Design and Implementation of Load Balancer for SSL VPN,TP393.1
  14. IPSec-based network security protocols Research and Implementation,TP393.08
  15. Network Safety Research and Realization Based on IPSec and SSL VPN,TP393.08
  16. Research and Application of Information Security Technique in Electronic Government Affair,TP393.08
  17. The Research and Design of IPSec VPN Security Gateway Based on Reconfigurable Cipher Processing,TP393.05
  18. The IVPN Research and Implementation Based on Fixed and Mobile Network Integration Business Application,F626
  19. Remote Monitoring and Information Platform of Research and Design Base on Web,TP277
  20. The Study and Realization of VPN Based on the Protocol of IP Security on Linux Platform,TP393.1
  21. Application of MPLS/VPN Technology in DCN Network,TN915.02

CLC: > Industrial Technology > Automation technology,computer technology > Computing technology,computer technology > Computer applications > Computer network > General issues > Computer Network Security
© 2012 www.DissertationTopic.Net  Mobile