基于IPSEC的网络安全技术研究与应用

【作者】 张剑；

【导师】 黄文学；

【作者基本信息】 河海大学 ， 计算机应用， 2001， 硕士

【摘要】 Internet的普及给网络安全技术提出了更高的要求。IPSEC被誉为新一代的Internet安全标准，是解决目前Internet严峻的安全危机的最佳选择。本文介绍了网络安全技术的种类及它们在解决网络安全问题中所发挥的作用和地位，并强调了数据包在传输途中的安全的重要性，比较了针对这类安全问题的各种解决方案，突出了IPSEC解决这类安全问题中的特点和优势；本文详细描述了IPSEC中的关键技术：密码算法、密钥管理，并阐述了这些技术与IPSEC的联系以及它们对实现IPSEC所起的作用；随后着重分析了IPSEC的体系结构，包的结构和处理过程。鉴于密钥交换协议在IPSEC中的基础地位，还特别地详细介绍了其密钥交换协议IKE的原理和包结构。文章的后面介绍了两个应用IPSEC的例子，一个是利用PGPNET在局域网范围内实现安全传输，并详细分析包结构；另外一个是模拟Internet的环境在校园网内搭建基于IPSEC的VPN。更多还原

【Abstract】 The Research and Application of Security Technologyof Network based on IPSEC[ABSTRACT] IPSEC is a new choice to deal with the increasing requirement of security of Internet. It is honored as the new generation of standard of Network Security. Having described varieties of security technologies of network and their use and position in dealing with network security, the paper emphasizes on security importance of packet when it is traveling. Comparing with very kind of scheme to solve the problem, the paper gives prominence to IPSEC and describes its characteristic and prominence in solving the problem. The paper describes the key technology applied to IPSEC桝lgorithm, Key Management, and how they connect with and work on IPSEC in detail. Subsequently, the paper emphasizes on analyzing the framework, the structure of packets and the process to deal with IPSEC packets. Because of the base position of Key桬xchanging Protocol in IPSEC, the paper describes the theory and packet structure of its Key-Exchanging Protocol桰KE in detail. In the last of the paper, two examples are described how to apply with IPSEC, one of which applies PGPNET to transfer packet in secure way in Local Area Network, the other of which builds VPN based on IPSEC in Campus Network, which can simulate the situation of Internet.更多还原