摘要： 分析了iSCSI 面临的安全问题，根据不同的安全需求，设计了一个基于IPSec 的分级安全iSCSI 方案，并通过试验对不同级别安全方案的性能进行评估。试验结果表明，在高配置硬件环境下，安全iSCSI 具有较好的性能；在低配置硬件环境下，安全iSCSI 会占用大量的系统资源，并且吞吐量也大幅度降低。

关键词: iSCSI 协议；网络存储；安全；IPSec

Abstract: This paper analyzes the security problems which iSCSI meets, and according to different security requirements, works out a graded iSCSI security scheme based on IPSec. It evaluates the performance of different graded security schemes through experiment. The result shows security iSCSI possesses better performance in high quality hardware environment, and security iSCSI occupyies massive system resources and throughout greatly decreases in low quality hardware environment

Key words: iSCSI protocol; Network storage; Security; IPSec