IPSec研究及实现

Research and implementation of IPSec

虚拟专用网(VPN)技术是在开放的网络上实现专用信息传输的一种网络安全技术,IPSec(IP安全体系结构)是实现VPN技术的有效手段。它是针对IPv4存在的安全问题,提出的一种标准的、健壮的以及包容广泛的安全机制,可以为IP及上层协议(如UDP和TCP)提供安全保证。详细地介绍了在网络层提供安全服务的IPSec安全体系结构及其安全协议的工作原理,并对其中的AH协议、ESP协议、安全关联、安全策略及其处理过程进行了深入的研究。最后,着重介绍了IPSec主要模块在Linux下的实现。

Virtual Private Network （VPN） is a security technology with which private information can be transferred under open network safely. IPSec （IP Security） is an efficient measure to realize VPN. It provided a kind of standard and robust security mechanism, and it could be used to provide security protection for IP and higher layer protocols. The architecture of IPSec protocol was analyzed at first, then AH protocol, ESP protocol, security alliance and security policy were discussed in detail. At last, the implementation of the main modules of IPSec was introduced.