상세정보
학술대회
A Study of Security Policy Enforcement using Priority
- 발행일
- 200610
- 출처
- SICE-ICASE International Joint Conference 2006, pp.3726-3729
- 협약과제
- 06MK1100, 고성능 네트워크 정보보호 시스템 개발, 손승원
- 초록
- This paper studies about the policy enforcement of security router platform with Intel IXP2800 network processor. IXP2800 network processor improves networking processing. Security router platform has packet filtering, intrusion detection and VPN functions. They are implemented at microengines of network processor. Security policy enforcement of router is implemented at Xscale core of network processor. Security router platform communicates the security policies with management system through COPS protocol. Security router platform analyzes the whole security conditions of network and preserves the network services from attacks according to policy. Security policies are packet filtering policy, intrusion detection policy, access control policy and VPN policy. © 2006 ICASE.
- KSP 제안 키워드
- Access Control Policies, Filtering policy, Management system, Network service, Security policy enforcement, intrusion detection, network processor, packet filtering