虚拟专用网的主要隧道协议的安全性剖析  

Analysis of Security Property About VPN’s Principal Tunnel Protocols

作　　者：李频[1] 

机构地区：[1]南京邮电大学计算机科学和技术系,南京210003

出　　处：《计算机工程》2006年第13期164-165,169,共3页Computer Engineering

摘　　要：隧道技术是构建VPN的核心技术,但这些隧道协议的实现本身也不是非常安全的。一旦网络攻击者利用隧道协议的安全弱点攻击VPN成功,所有互联网上利用VPN技术提供的安全数据传输将不再安全。探讨了两种主要的隧道协议——PPTP和IPSec实现中的安全漏洞。通过分析,最后的结论是IPSec协议是当前最好和最安全的IP安全协议。随着IPv6的使用,IPSec必将得到更广泛的使用。Tunnel technology is the nuclear technology of constructing VPN, but tunnel technologies are not very safe. Once network attackers attack VPN successfully making use of security weakness of tunnel protocols, all safety data transmission making use of VPN technology in the Internet is no longer safe. Then the paper probes into security weakness of two principal tunnel protocols（PPTP and IPSec）. By means of analysis the final conclusion is that IPSec protocol is the best and most safe protocol in the IP security protocols. IPSec must be used more extensively along with the use of IPv6.

关 键 词：虚拟专用网 安全协议 隧道协议 PPTP IPSEC 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]