IPSec策略配置错误分析及其检测算法  

Analysis of IPSec Policy Configuration Mistakes and Its Detecting Algorithm

作　　者：王卫平[1] 李哲鹏[1] 陈文惠[1] 朱卫未[1] 

机构地区：[1]中国科学技术大学信息管理与决策科学系,安徽合肥230026

出　　处：《信息安全与通信保密》2006年第12期131-132,135,共3页Information Security and Communications Privacy

基　　金：国家863计划资助项目(2003AA103710)

摘　　要：作为企业虚拟专用网络的安全技术基础,IPSec发挥着非常重要的作用。通过对IPSec策略的配置,安全管理员实现了通信双方的安全通信。如何正确地配置IPSec策略并避免策略冲突,在实际应用中依然存在复杂性。论文在讨论了IPSec策略配置过程中可能出现的错误类型及相应的解决方法之后,给出了一个检测IPSec策略配置错误的算法。As the enterprises＇virtual private network security technology barrier, IPSec play a very important role. And through the configuration of IPSec strategy, safety administrator realizes safe communication between the two sides, However, it is a tough issue how to configure the system correctly. After analyzing the possible errors and their corresponding solutions during the strategy configuration process, the author puts forward arithmetic on detecting strategy configuration errors.

关 键 词：防火墙 IPSEC 规则冲突 算法 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]