Research And Implementation Of VPN Based On IPSec Under Windows Platform

Along with the rapid development of computer networks, security problems have threatened the so-called "net economy" .How to protected the security of the Internet, especially the security of the information transported thought it, has become the focus people concern. Therefore, the research of net information security is practical and valuable.The developer must consider the corresponding network security problem when building his/her application system. A transparent network security solution, which is independent of applications, is proposed in this thesis. It frees developers from network security problems and lets them focus on domain developing. Moreover, the transparent security system gives new life to some application systems that were built without security considerations. The concept introduced in this paper helps to resolve network security problems independently and creates an enterprise level security policy.Because the safety protocol of the upper network has dependence of application program, the transparent network security can only be implemented in the IP layer. This thesis, according to Internet safety protocols (RFC2401, RFC2402,RFC2406, RFC2408), utilize encrypt and authentication technology, combine and make the technology of IP filtering, in the already existing system of the host computer, implemente IPSec, guarantee the secure communication among the host computer and host computer, establish the system of transparent network security.The paper provides the theory scheme of IP security system and technological main point implemented in the kernel mode, and through concrete software design and programming, have implemented the basic function of IP security, have reach the goal of the anticipated transparent network security tentatively, has formed the embryonic form of a practical software.