Title :
Design and Optimization of VPN Security Gateway
Author :
Yanqin, Zhu ; Peide, Qian ; Yuemei, Hu
Author_Institution :
Sch. of Comput. Sci. & Technol., Soochow Univ., Suzhou
Abstract :
The VPN security gateway provides authentication, confidentiality, and key management. It checks the security policy database (SPD) so as to deal with the inbound and outbound packets. To optimize the performance of the VPN gateway, we have done the relative works in two aspects. On the one hand, we apply the theory of machine learning to the configuration of security policy database (SPD). And the scheme based on the ID3 decision tree is presented. On the other hand, we apply elliptic curve cryptography (ECC) to the key exchange and design the fast algorithms. Smaller keys can be used in ECC than in other public-key systems, but with equivalent levels of security. With our optimization efforts, the efficiency of the VPN security gateway is enhanced greatly.
Keywords :
decision trees; internetworking; public key cryptography; telecommunication security; virtual private networks; ID3 decision tree; VPN security gateway; elliptic curve cryptography; key management; public-key systems; security policy database; Algorithm design and analysis; Authentication; Data security; Databases; Decision trees; Design optimization; Elliptic curve cryptography; Machine learning; Machine learning algorithms; Virtual private networks; ECC; ID3; Machine learning; Security policy database; VPN security gateway;
Conference_Titel :
Communications and Networking in China, 2006. ChinaCom '06. First International Conference on
Conference_Location :
Beijing
Print_ISBN :
1-4244-0463-0
Electronic_ISBN :
1-4244-0463-0
DOI :
10.1109/CHINACOM.2006.344676
