IPsec策略管理的研究

基于策略的管理是当前安全研究的热点问题之一。该文首先介绍IPsec策略的定义及冲突的原因,随后分析了对策略管理提出的要求,在此基础上提出了IPsec策略管理的一个通用框架,并对其中的关键部件给出了具体的解决方案,包括采用SPP协议进行网关和策略发现,使用Keynote信任管理系统进行策略的一致性检查。最后,讨论了当前研究存在的问题及今后的研究方向。

Policy Management for Ipsec

Policy Management has been one of the hot topics in security research.This paper first presents the concept of IPsec policy and the reasons for policy conflicts.Then the requirements of managing IPsec policy are described in detail.Based on that,a common framework of the IPsec policy management is introduced,and the solutions to several critical components are proposed.We use Security Policy Protocol for gateway and policy discovery,check compliance with IPsec policy by Keynote trust management approach.Finally,the existing problems of current work and future re-search directions are discussed.