Internet网络级安全系统设计

Design of Internet Security Systems at Network Layer

分析了因特网中的网络级安全问题。提出了两种网络级安全系统的设计途径。一种是在现有ＩＰ协议的基础上建立分组过滤路由器和代理ＡＫ务器结合的防火墙系统。另一种是在扩展的ＩＰ安全协议基础上建立穿越因特网的ＶＰＮ安全系统。分别分析了其系统原理和设计原则。

The security problems of the Internet at network layer are analyzed. Two kinds of design approach of security system at network layer are proposed. One, which is based on the cur- rent IP protocol, is to establish firewalls combined with IP packet - filter routers and proxy servers. The other, which is based on the extended IP security protocols, is to establish security systems of VPNs through the Internet. Their system theories and design principles are discussed respectively.