ForCES架构安全网关中若干逻辑功能块的设计与在NP上的实现

《ForCES架构安全网关中若干逻辑功能块的设计与在NP上的实现》由会员上传分享，免费在线阅读，更多相关内容在学术论文-天天文库。

1、浙江T商大学硕士研究生学位论文DESIGNOFSEVERALLOGICALFUNCTIONBLOCKSOFFORCESBASEDSECURITYGATEⅥ，AYANDIMPLEⅣ匝N1ATIONONNETWORKPROCESSORABSTRACTAsthedevelopmentofcomputernetworktechnology,avarietyofsecurityflawsexistinthenetworkinformationsystemiscontinuallyexposed．Thenetworksecu

2、rityproblemisincreasing．ForCES(ForwardingandControlElementsSeparation)isanewarchitectureoftheNextGenerationNetwork(NGN)element(anetworkelementmainlyreferstorouters，switches，etc)，thatisbasedonthethinkingofopenprogrammable，andisbroughtforwardbytheForCESworkingg

3、roupintheroutingargflofIETF(IntemetEngineeringTaskForce)．Itcanbettersolvethesecurityprobleminthenetwork,andcurrentlybecomeanimportantresearchdirectionoftheNGN．ThisthesismostlystudiessomekeytechnologiesbasedontheForcESframework，includes：(1)themodelofForCESfram

4、eworksecuritygateway．(2)ForCESframeworksecuritygateway’Sfirewall—relatedLFB(LogicalFunctionBlock)modeling．(3)ThekeytechnologyofNP-basedLFBrealization，andbringforwardconcretesolutions．(4)Thetechnologyofhardwarerealizationaboutdataencryption／decryption．Dependin

5、gonthestudyoftheabove·mentionedkeytechnologies，thisthesismainlycompletesthefollowingtasks．●DesignaLFBmodelthatCanbeappliedtothefirewallandVPNsecuritypolicy；DesignasortofSPI(StatefulPacketInspection)LFBmodel；DesignasortofllI浙江T商大学硕：I：研究生学位论文authenticationLFBmo

6、del；basedOilthestudyofavarietyofencryptionanddecryptiontechnology,designasortofencryption／decryptionLFBmodel；●Bringforwardahashtechnology—basedSPIrulefastmatchingalgorithm，andrealizethestatepacketinspectionLFBbasedonthisalgorithm；一●Thoughtanin-depthstudyofthe

7、serialdatastreamundermuti-engineandmuti-threadedwhichexistintheprogrammingprocessofNP,putforwardandrealizeaneffectivesolutiontothecomplicateddataaccess．●ImplementthesecuritypolicyLFBbasedonthesecuritypolicymatchingalgorithm；●Dependonain-depthstudyofNPparallel

8、programmingtechnology,implementapipelinetechnology-basedencryption／decryptionLFBontheIXP2850；·ThoughtthequantitativeanalysisofIPSecVPNdatapacketprocess．getthespecificperformanceindicators