摘要： 提出了一个在Linux平台上实现IPSec的框架，给出了安全策略数据库(SPD)和安全关联数据库(SAD)记录的细节；分析了Linux的网络IP层的代码；给出了IPSec主要函数的原型，它们的功能和在核心的嵌入点。

关键词: Linux, IPSec, 安全策略数据库, 安全关联数据库

Abstract: This paper proposes a framework to implement IPSec under Linux.It describes the details of the records of the security policy database (SPD) and security association database(SAD); analyzes the Linux program structures of the IP layer codes; and gives the prototypes of the core IPSec procedures, their functions, and where to embed them into the Linux kernel.

中图分类号: 

• TP393.03