摘要
由于IPSec协议本身具有的完备性和安全性,使得阻断IPSec通信非常困难,特别是在IPSec通信截获与阻断设备并联接入的情况下,一旦通信双方建立起IPSec安全关联再实施阻断几乎是不可能的。给出了一种截获并阻断IPSec通信的实现方案,在此基础上,介绍了发现并阻断IPSec通信的方法。
The completeness and security of the IPSec protocol make it is very difficult to block illegal IPSec communication. Especially in the case of parallel connection, once the IPSec security association is established, it is impossible to block IPSec communication. The paper gives a scheme of intercepting and blocking IPSec communication. Based on the general frame of system given in the paper, a method of discovering and blocking IPSec communication is introduced.
出处
《计算机应用研究》
CSCD
北大核心
2005年第11期193-194,197,共3页
Application Research of Computers
基金
国家科技部"973"资助项目(G1999035801)