基于NDIS的数据包安全传输模型

Model of Secure Data Transmitting Based on NDIS

为使开发者在操作系统内核模式下处理网络数据,Windows网络接口规范(NDIS)提供了标准的开发接口。该文以NDIS中间层为基础,提出一种新的数据包安全传输模型。该模型不同于IPSec和SSL,在传统的客户服务器模式下引入安全服务器,在NDIS中间层截获数据包并用一种新方法对数据包进行处理,此模型不仅能够保证数据安全加密传输的基本功能,而且能够使传输过程无法被跟踪,也不会受到NAT的影响。

In order to deal with network data in kernel mode for developers, Windows Network Device Interface Standard (NDIS) provides standard developing interfaces. Based on NDIS intermediate, this paper introduces a new security data transmission model. The difference from traditional IPSec and SSL is that this model imports security server to traditional client server model and puts forward a new method to deal with data on top of NDIS intermediate. This model is able to ensure the security of data transmission and anti-scouted of transmission, it also not be effected by NAT.