• 主题
高级搜索  >
历史搜索 清空历史
首页> 外文期刊>Journal of High Speed Networks >IPsec/VPN security policy correctness and assurance
【24h】

IPsec/VPN security policy correctness and assurance

机译：IPsec / VPN安全策略的正确性和保证

获取原文
获取原文并翻译 | 示例
           
页面导航
  • 摘要
  • 著录项
  • 相似文献
  • 相关主题

摘要

With IPsec/VPN policies being widely deployed, how to correctly specify and configure them is critical in enforcing security requirements, especially among different administrative domains across the Internet. Under current practice, IPsec/VPN policies are specified individually by system administrators from different organizations without any formal coordination. This practice implies unintentional errors due to inconsistent IPsec/VPN policies. Furthermore, Internet routing dynamics may possibly interfere with IPsec/VPN policies such that unexpected conflicts occur due to a mismatch between the routing and IPsec/VPN layers. To deal with these problems, we formally define IPsec security requirements, policies, and their correctness criteria. Based on these definitions, we present an inter-domain architecture to automatically generate correct and efficient security policies. Our approach works when we are given a set of security requirements for a single end-to-end traffic flow. We can also deal with changes when new security requirements are added. Finally, we present simulation results which evaluate the performance of our solutions.
机译：随着IPsec / VPN策略的广泛部署，如何正确地指定和配置它们对于实施安全要求至关重要，特别是在Internet上不同管理域之间。在当前的实践中，IPsec / VPN策略由来自不同组织的系统管理员分别指定，没有任何正式协调。由于IPsec / VPN策略不一致，这种做法意味着意外的错误。此外，Internet路由动态可能会干扰IPsec / VPN策略，从而由于路由和IPsec / VPN层之间的不匹配而发生意外冲突。为了解决这些问题，我们正式定义了IPsec安全要求，策略及其正确性标准。基于这些定义，我们提出了一种域间体系结构，以自动生成正确且有效的安全策略。当为单个端到端流量提供了一组安全要求时，我们的方法就会奏效。添加新的安全要求后，我们还可以应对更改。最后，我们给出了仿真结果，用于评估解决方案的性能。

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱：kefu@zhangqiaokeyan.com

京公网安备：11010802029741号 ICP备案号：京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有

  • 客服微信

  • 服务号