安全网关优化

Security Gateway Optimization

安全网关是网络安全的重要手段,既能控制网络行为,又能保证信息安全传输.但是,安全网关的协议变换操作和数据加密封装,增加了系统的复杂度和CPU的负荷,降低了安全网关的性能.重点研究安全网关的软件结构优化和系统性能优化.在系统软件结构优化方面,抽象出安全网关的原子操作集及操作序列表达式,并改进了安全网关的访问控制表;在系统性能优化方面,本文提出了安全快速处理算法.实验结果表明,新的算法和软件结构大大提高了安全网关的吞吐率,降低了分组处理延时,保证策略数目不会影响吞吐率的变化.

The Security Gateway is a very important measure of network security, which controls the network behaviors and ensures the safety for information transport. But cryptograph algorithms and the protocol transform increase the system complexity and CPU burden, reduces the throughput of the security gateway. This paper focuses on issues related to software architecture optimization and performance optimization. To optimize the architecture of the security gateway, the paper presents the concept of atomic operation and the operation sequence expression, and ameliorates the access-list. To improve the performance, the fast transform algorithm is presented. The experiment results show that this new algorithms and the software architecture tremendously improve the throughput of the security gateway, reduce the delay of the packets and ensure that the numbers of policies have hardly effect on the throughput.