Optimized design of SPD for NGI

Author

Ning-Ning, Lu ; Hua-Chun, Zhou ; Kai-Hong, Dong ; Hong-Ke, Zhang

Author_Institution

Sch. of Electron. & Inf. Eng., BeiJing Jiaotong Univ., Beijing, China

fYear

2009

fDate

14-17 Oct. 2009

Firstpage

209

Lastpage

212

Abstract

IPsec is also an important security protocol for next generation Internet (NGI) and it has become a hot topic in security communication research to increase IPsec´s performance without any security decreasing. In this article, we analyze the implementation of IPsec´s security policy database (SPD) and its searching method. We also proposed an optimized design for the SPD with hash table based on chaining addressing to improve its performance and scalability. Finally, we compare our new method with the existing one and find that our new SPD design could effectively reduce the average searching length of security policy.

Keywords

IP networks; Internet; cryptographic protocols; telecommunication security; IPsec; NGI; SPD; hash table; next generation Internet; optimized design; searching method; security communication; security policy database; security protocol; Communication system security; Data security; Databases; Design engineering; Design optimization; Information security; Internet; Linux; Protection; Protocols; IPsec; next generation internet; security policy database;

fLanguage

English

Publisher

ieee

Conference_Titel

Future Information Networks, 2009. ICFIN 2009. First International Conference on

Conference_Location

Beijing

Print_ISBN

978-1-4244-5158-6

Electronic_ISBN

978-1-4244-5159-3

Type

conf

DOI

10.1109/ICFIN.2009.5339563

Filename

5339563