基于着色Petri网的IPSec协议建模与分析

IPSec modeling and analysis based on Colored Petri Net

作为一种重要的工业标准网络安全协议,建立IPSec安全策略控制系统需要一个正确的建模工具。相比较其它的建模语言,着色Petri网(CPN)提供了一种比较清晰的关于系统状态和行为的描述方法。在本文中,尝试利用CPN来描述动态变化的IPSec协议,并建立了IPSec协议中发送端的CPN模型。

As an important industry standard network security protocol,establishing a IPSec security policy control system requires a right modeling tool. Compared with other modeling languages, CPN provides a very clear desprition about the status and action of system. In this paper, we try to adopt the abundant expressions of CPN to describe dynamic change of IPSec protocol, and establish a CPN model of sender in IPSec protocol.