| IPSec安全策略自动生成机制的研究 |
| |
| 引用本文： | 邓磊,艾吉松. IPSec安全策略自动生成机制的研究[J]. 计算机安全, 2009, 0(1): 4-8 |
| |
| 作者姓名： | 邓磊 艾吉松 |
| |
| 作者单位： | 同济大学,电子与信息工程学院,上海,201804 |
| |
| 基金项目： | 国家高技术研究发展计划(863计划) |
| |
| 摘 要： | IPSec是一个策略驱动的安全机制，只有当安全策略被正确定义和配置时才能保证IPSec的功能被正确执行。如何正确地生成IPSec策略并避免策略冲突，在实际应用中依然存在复杂性。在讨论了IPSec策略配置过程中可能出现的冲突及相应的解决方法之后，给出了一个自动生成零冲突IPSec策略的算法，并与文献中的其他方法进行了比较。
|
| 关 键 词： | IPSec 安全策略 策略冲突 |
A Study of Automatic Generation of IPSec Security Policies |
| |
| DENG Lei,AI Ji-song. A Study of Automatic Generation of IPSec Security Policies[J]. Network & Computer Security, 2009, 0(1): 4-8 |
| |
| Authors: | DENG Lei AI Ji-song |
| |
| Affiliation: | (Tongji University, Shanghai 201804 , China) |
| |
| Abstract: | IPSec is a typical policy-enabled network serivce,it will function correctly only if security policies are correctly specified and configured. However,it is a tough issue how to generate policies correctly.After analyzing the possible policy conflicts,the author proposed an algorithm to automatically generate conflict-free policies which satisfy all requirements.We also compared the results of simulation with other approaches and show that it outperforms existing approaches in the literature. |
| |
| Keywords: | IPSec |
| 本文献已被 CNKI 维普 万方数据 等数据库收录！ |
|
