Distributed configuring method for IPSec gateways

Computer Engineering and Applications ›› 2008, Vol. 44 ›› Issue (14): 127-129.

• 网络、通信、安全 • Previous Articles Next Articles

Distributed configuring method for IPSec gateways

TANG Yi^1,2,ZHANG Lian-kuan³

1.Department of Information Sciences,Guangzhou University,Guangzhou 510405，China
2.Guangdong Key Laboratory of Information Security Technology,Zhongshan University,Guangzhou 510275，China
3.Department of Mathematics,South China Agricultural University,Guangzhou 510642，China

Received:2007-08-27 Revised:2007-11-05 Online:2008-05-11 Published:2008-05-11
Contact: TANG Yi

IPSec网关的一种分布式配置方法

唐屹^1,2,张连宽³

1.广州大学数学与信息科学学院，广州 510405
2.中山大学广东省信息安全技术重点实验室，广州 510275
3.华南农业大学数学系，广州 510642

通讯作者: 唐屹

Abstract

Abstract: An application scenario for IPSec is to partition a network by IPSec gateways.The security requirements are implemented by IPSec policies between gateways.However,the overlapping tunnels may lead to network traffic looping and introduce policy conflicts.A distributed method is proposed,named DistIPSec,to generate conflict free policies for IPSec gateways.The simulated experiments show the validity of the proposed method.

Key words: IPSec configuration, distribution, policy confliction and resolution

摘要： IPSec协议的一种应用模式是采用IPSec网关间隔各个网络段，通过网关的策略配置，实现安全通信需求。然而，交叉的IPSec策略可能导致信息回流，引发策略冲突，破坏安全需求。提出IPSec网关的一种基于多agent系统的配置方法，自动分布式生成无冲突的IPSec策略集，可以避免集中式生成方法单点失效的弱点。模拟实验验证了这种方法的可行性。

关键词: IPSec配置, 分布式, 策略冲突与消解

TANG Yi^1,2,ZHANG Lian-kuan³. Distributed configuring method for IPSec gateways[J]. Computer Engineering and Applications, 2008, 44(14): 127-129.

唐屹^1,2,张连宽³. IPSec网关的一种分布式配置方法[J]. 计算机工程与应用, 2008, 44(14): 127-129.

[1]	SANG Jianghui, JIANG Haiyan. Multi-label Transfer Learning Algorithm Based on Joint Distribution Alignment [J]. Computer Engineering and Applications, 2021, 57(9): 154-161.
[2]	ZHOU Zhou, HAN Fang, WANG Zhijie. Application of Improved SSD Algorithm in Chinese Sign Language Recognition [J]. Computer Engineering and Applications, 2021, 57(3): 156-161.
[3]	FU Zhaohui, LIU Changshi. Research on Multi-depot Vehicle Routing Problem Based on Joint Distribution Mode [J]. Computer Engineering and Applications, 2021, 57(16): 291-298.
[4]	LI Leixiao, DENG Dan, LI Jie, WANG Yongsheng. All-to-All Comparison Computing Data Distribution Strategy Based on Particle Swarm Optimization [J]. Computer Engineering and Applications, 2021, 57(15): 109-117.
[5]	ZHANG Nianpeng, WU Xu, ZHU Qiang. Entropy-Based Oversampling Framework [J]. Computer Engineering and Applications, 2021, 57(13): 96-101.
[6]	YANG Yong, GUO Ling, YE Yangdong. Approach of Total Variation Flow Boundary Integrated with M2GGD for Natural Image Segmentation [J]. Computer Engineering and Applications, 2021, 57(11): 202-210.
[7]	ZHANG Shiqi, WEI Feifei, FAN Xinyue. Model of Secure Routes Selection Influenced by Weather and Traffic Accidents [J]. Computer Engineering and Applications, 2021, 57(10): 246-251.
[8]	WEN Da, CUI Shuangxi, FAN Xiaochao, JIANG Guojun. Two-Level Optimal Dispatching of Active Distribution Network Considering Source-Load Interaction [J]. Computer Engineering and Applications, 2021, 57(10): 259-265.
[9]	REN Xinhui, WANG Liu. Location Model of Automatic Airport Partitioning for Unmanned Aerial Vehicles Under Urban Instant Delivery [J]. Computer Engineering and Applications, 2021, 57(10): 266-272.
[10]	LI Mengmeng, SHAO Liangzhi, CUI Wenchao, SUN Shuifa. Joint Bilateral Filtering Method for Ultrasound Image by Fisher-Tippett Distribution Fitting [J]. Computer Engineering and Applications, 2020, 56(9): 221-227.
[11]	ZHOU Rong, LI Jun, WANG Hao. Reverse Learning Particle Swarm Optimization Based on Grey Wolf Optimization [J]. Computer Engineering and Applications, 2020, 56(7): 48-56.
[12]	WANG Qingshan, ZHANG Jun, LIU Yuansheng, ZHANG Xinchen. Point Cloud Registration Algorithm Based on Combination of NDT and ICP [J]. Computer Engineering and Applications, 2020, 56(7): 88-95.
[13]	LU Yuanyuan, FENG Hao, LI Jing. Active Contour Image Segmentation Combined with Statistical Modeling of Distribution Metrics [J]. Computer Engineering and Applications, 2020, 56(7): 228-233.
[14]	FAN Wenbing, SUN Zhiyuan. SAR Image Segmentation Algorithm Based on Generalized Gauss Distribution in Wavelet Domain [J]. Computer Engineering and Applications, 2020, 56(5): 222-226.
[15]	SONG Jie, XU Bing, YANG Miaozhong. Image Segmentation Based on Adaptive Step Size Fruit Fly Optimization Algorithm [J]. Computer Engineering and Applications, 2020, 56(4): 184-190.

Distributed configuring method for IPSec gateways

IPSec网关的一种分布式配置方法

PDF

Knowledge

Abstract

Cite this article

share this article

References

Related Articles 15

Recommended Articles

Metrics