Title :
Optimized design of SPD for NGI
Author :
Ning-Ning, Lu ; Hua-Chun, Zhou ; Kai-Hong, Dong ; Hong-Ke, Zhang
Author_Institution :
Sch. of Electron. & Inf. Eng., BeiJing Jiaotong Univ., Beijing, China
Abstract :
IPsec is also an important security protocol for next generation Internet (NGI) and it has become a hot topic in security communication research to increase IPsec´s performance without any security decreasing. In this article, we analyze the implementation of IPsec´s security policy database (SPD) and its searching method. We also proposed an optimized design for the SPD with hash table based on chaining addressing to improve its performance and scalability. Finally, we compare our new method with the existing one and find that our new SPD design could effectively reduce the average searching length of security policy.
Keywords :
IP networks; Internet; cryptographic protocols; telecommunication security; IPsec; NGI; SPD; hash table; next generation Internet; optimized design; searching method; security communication; security policy database; security protocol; Communication system security; Data security; Databases; Design engineering; Design optimization; Information security; Internet; Linux; Protection; Protocols; IPsec; next generation internet; security policy database;
Conference_Titel :
Future Information Networks, 2009. ICFIN 2009. First International Conference on
Conference_Location :
Beijing
Print_ISBN :
978-1-4244-5158-6
Electronic_ISBN :
978-1-4244-5159-3
DOI :
10.1109/ICFIN.2009.5339563
