解决IPsec/VPN安全策略问题的新方法  

A New Method of Solving Security Policy of IPsec/VPN

作　　者：刘刚[1] 罗喜召[2] 姚全珠[1] 王尚平[2] 

机构地区：[1]西安理工大学计算机科学与工程学院,陕西西安710048 [2]西安理工大学理学院,陕西西安710048

出　　处：《现代电子技术》2003年第8期29-33,36,共6页Modern Electronics Technique

基　　金：国家自然科学基金资助项目 (60 0 730 52 );陕西省教育厅自然科学研究计划资助项目 (0 0 JK2 66)

摘　　要：提出了一种解决 IPsec/ VPN安全策略问题的新方法。根据安全策略来决定对所有进入或外出的通信量进行安全操作 ,因此正确地指定与配置安全策略显得非常重要。目前针对单个安全网关是通过手工配置 IPsec安全策略 ,这样效率非常低且易出错。在该方法中根据给定的要求 ,通过把整个通信量流分成互不相关的束 ,找出满足每束要求的子集 ,然后生成每束要求操作的策略。这样不仅减少了管理员的大量工作 。A new method is proposed for solving the security policy of IPsec/VPN The security treatment of all inbound or outbound traffic will be determined by the security policies, and thus it is critical for policies to be specified and configured correctly IPsec policies are manually configured to individual security gateway in current practice, which could be very inefficiently and errorprone A subset requirement of each bundle is found by dividing the entire traffic flow into some irrelative bundle based on the given requirement in the method, and then the policy is generated for requirement actions of every bundle, which can not only save tremendous administrative labor but also guarantee the policies are correct

关 键 词：安全策略 IPSEC 通信量 束 VPN 安全网关 防火墙 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]