IPSec通信截获与阻断系统研究  

Research on Intercepting and Blocking System of IPSec Communication

作　　者：陈麟[1] 李焕洲[1] 胡勇[2] 戴宗坤[2] 

机构地区：[1]四川师范大学电子工程学院,四川成都610068 [2]四川大学信息安全研究所,四川成都610064

出　　处：《计算机应用研究》2005年第11期193-194,197,共3页Application Research of Computers

基　　金：国家科技部"973"资助项目(G1999035801)

摘　　要：由于IPSec协议本身具有的完备性和安全性,使得阻断IPSec通信非常困难,特别是在IPSec通信截获与阻断设备并联接入的情况下,一旦通信双方建立起IPSec安全关联再实施阻断几乎是不可能的。给出了一种截获并阻断IPSec通信的实现方案,在此基础上,介绍了发现并阻断IPSec通信的方法。The completeness and security of the IPSec protocol make it is very difficult to block illegal IPSec communication. Especially in the case of parallel connection, once the IPSec security association is established, it is impossible to block IPSec communication. The paper gives a scheme of intercepting and blocking IPSec communication. Based on the general frame of system given in the paper, a method of discovering and blocking IPSec communication is introduced.

关 键 词：IPSec通信 阻断 IKE(Intemet KEY Exchange) 安全关联 

分 类 号：TP309.2[自动化与计算机技术—计算机系统结构]