控制发送策略对IPsec的补充和完善

The Limited Transmission Protocol to Supplement and Improve IPsec

针对IPsec无法解决的安全隐患提出了一种新的网络安全协议———有限制发送协议,在新的协议中,如果主机向网络发送大量的具有攻击性的数据包时,其发送权利将会受到限制,从而保证网络的安全.采用OPNET仿真软件对新的协议进行了仿真,仿真结果表明,采用新的协议时,网络性能要好.以目标客户机平均HTTP响应时间为例,采用新的协议时,平均HTTP响应时间为0.013 s,不采用新的协议时,平均HTTP响应时间为0.032 s.

Firstly, IPsec is introduced. And its shortage is analyzed. Secondly, as a new Protocol, the limited transmission protocol is put forward. In the new protocol, in order to assure the security of the network, if too many data packets are transmitted into the network by a computer, the computer could be limited to transmit data pack- ets. Then, the performance of the new protocol is simulated with OPNET software, which shows the new protocol could enhance the network performance. For example, the average of HTFP object response time is 0. 013 s when the new protocol is adopted in the network. When the new protocol is not adopted, it is 0. 032 s.