VPN中IKE协议安全的研究与改进

The Research for VPN System and Implementation of IKE Protocol

描述了基于IPSec的VPN的关键技术,分析了因特网密钥交换协议IKE主模式交换中的预共享密钥验证方法,针对协议的不足提出了改进算法,以有效抵御中间人攻击和重发攻击.

This paper presents some rationale and key technology relevant to the implementation of VPN based on IPSec, briefly describes the main mode exchange of IKE with pre - shared key authentication method and, according to the flaw of IKE,suggests a solution to the improvement of the protocol, which can protect against man - in - the - middle attack and repeat attack.