Design and Optimization of VPN Security Gateway

Author

Yanqin, Zhu ; Peide, Qian ; Yuemei, Hu

Author_Institution

Sch. of Comput. Sci. & Technol., Soochow Univ., Suzhou

fYear

2006

fDate

25-27 Oct. 2006

Firstpage

1

Lastpage

4

Abstract

The VPN security gateway provides authentication, confidentiality, and key management. It checks the security policy database (SPD) so as to deal with the inbound and outbound packets. To optimize the performance of the VPN gateway, we have done the relative works in two aspects. On the one hand, we apply the theory of machine learning to the configuration of security policy database (SPD). And the scheme based on the ID3 decision tree is presented. On the other hand, we apply elliptic curve cryptography (ECC) to the key exchange and design the fast algorithms. Smaller keys can be used in ECC than in other public-key systems, but with equivalent levels of security. With our optimization efforts, the efficiency of the VPN security gateway is enhanced greatly.

Keywords

decision trees; internetworking; public key cryptography; telecommunication security; virtual private networks; ID3 decision tree; VPN security gateway; elliptic curve cryptography; key management; public-key systems; security policy database; Algorithm design and analysis; Authentication; Data security; Databases; Decision trees; Design optimization; Elliptic curve cryptography; Machine learning; Machine learning algorithms; Virtual private networks; ECC; ID3; Machine learning; Security policy database; VPN security gateway;

fLanguage

English

Publisher

ieee

Conference_Titel

Communications and Networking in China, 2006. ChinaCom '06. First International Conference on

Conference_Location

Beijing

Print_ISBN

1-4244-0463-0

Electronic_ISBN

1-4244-0463-0

Type

conf

DOI

10.1109/CHINACOM.2006.344676

Filename

4149929