Linux下基于IPSec和应用层代理的安全系统的设计  

Design of Security System based on IPSec and application layer proxy under Linux

作　　者：范振岐[1] 

机构地区：[1]塔里木大学信息工程学院,阿拉尔843300

出　　处：《铁路计算机应用》2008年第2期35-38,共4页Railway Computer Application

摘　　要：说明IPSec的一种实现frees/wan的缺点,阐述在netfilter下实现IPsec的思想,然后说明在应用层级由代理建立的安全机制。最后通过IPSec和squid相互结合,提出一种对计算机网络系统本身及其传输的信息都具有安全防护的设计。It was firstly illuminated the drawback of a kind of implementing flees/wan for IPSec, and expounded how to implement IPSec based on the neffilter mechanism, and then accounted for the security mechanism established by application proxy on application layer. At last, by combination of IPSec and squid, it was set forth a sort of design that could Secure Computer Network System and transmited information.

关 键 词：LINUX操作系统 IP安全协议 NETFILTER 代理机制 

分 类 号：TP391[自动化与计算机技术—计算机应用技术]