摘要： 虚拟专用网络（VPN）的安全性是企业最为关注的问题。传统的基于防火墙的安全系统已不能满足企业不断增长的安全需求。提出了一种基于IP安全协议的VPN安全机制，分析了其体系结构并讨论了它在操作系统中的实现方法。这种安全机制的实现对上层应用和用户都是透明的。使用不同的加密算法，它可以在网络层中提供完整性、保密性、可鉴别性和不可否认性等服务，从而增强了VPN的安全性。

关键词: 虚拟专用网络, 互连网协议, 网络安全

Abstract: Security of VirtUal Private Networks (VPN) is the deadly concerned issue of entmprises. The increasing requirement ofenterPrises for network security has not been satisfied by the classical firewall-based security systems. A security mechanism based on IPsecurity protocols is proposed for Virtual Private Networks. The system architecture is analyzed and the implementahon methods in operatingsystems.are discussed. The implementahon of this meehanism is transparent to both applications and users. Using different encryptionalgorithms, it can provide integrahon, secrecy, authenhcation and nonrepudiation services at the network layer, so it enhances the security ofVPN.

中图分类号: 

• TP393.0