基于IPSEC的VPN的安全功能要求的设计与分析  

Design and Analysis for the Security Function Requirements of VPN Based on IPSec

作　　者：王昱白[1] 汪海航[2] 吕述望[1] 

机构地区：[1]中国科技大学研究生院,北京100039 [2]同济大学计算机系,上海200092

出　　处：《计算机工程与应用》2003年第16期156-158,共3页Computer Engineering and Applications

基　　金：国家自然科学基金资助项目(编号:70071022)

摘　　要：《计算机信息系统安全保护等级划分准则》是我国计算机安全产品和系统必须遵循的标准,而CC是一个新的国际性通用标准,设计一个满足CC标准的网络安全产品或系统,目前国内还没有借鉴之处。文章对国际国内的安全标准现状进行了分析比较,研究了将我国的计算机信息系统安全保护等级的要求用CC标准来描述的问题,并对基于IPSEC的VPN的安全功能要求的实现进行了研究。The China Classified Criteria for Security is a rule that each security IT products or systems must follow.The Common Criteria(CC)is a newly adopted international standard that is mutually recognized in a global IT market.There are no examples in the country for designing an IT security product or system that has been validated against the CC.In this paper,the current international and national IT security standards are analyzed and compared,and the descrip-tion of the security policy of classified protection in the form of CC security functional requirement components are studied.At the end,it discusses the implementation of the security functional requirement of VPN based on IPSec.

关 键 词：安全构件 安全功能要求 安全标准评估 IPSEC协议套件 

分 类 号：TP301.6[自动化与计算机技术—计算机系统结构]