Design of Netfilter-based Secure Communication Gateway

摘要：

At present, network security protection and information security insurance has become a more and more popular problem. VPN security gateway is one kind of network security equipment which integrates firewall and information encryption technology. IPSec protocol of VPN gateway, which encapsulates data in network layer, is of advantages such as data confidentiality, integrity assurance. This article designs protocol processing module and firewall module in detail based on the IPSec protocol, while the deep packet inspection engine of firewall module implements string pattern match and protocol identification. These modules can strengthen the content detection capability of security gateway.

关键词： VPN Netfilter Firewall Deep Packet Inspection

作者: Che Zihui An Lei Ji Xueyun

作者单位: Department of math and computer BaoDing University, BDU BaoDing, Heei, China Department of math and computer BaoDing University, BDU BaoDing, HeBei, China

会议类型: 国际会议

会议名称: 2010 International Conference on Circuit and Signal Processing(2010年电路与信号处理国际会议 ICCSP 2010)

会议地点: 上海

会议语种:英文

页码: 138-141

在线出版日期: 2010-12-25（万方平台首次上网日期，不代表论文的发表时间）