The SSL VPN Security Technology Research And Improvement

With the continuous development of computer networks, network security technology has become a hot network technology development. Since the date of the birth of the Internet is free and open to representatives of the Internet over the years is in compliance with this motto. But as the network continues to develop, it exposed the safety issues are also receiving much attention, so more and more people started using the Internet security issues or research. With the deepening of research and application of various security technologies constantly being created and improved, which was undoubtedly the most famous SSL VPN technology.In this paper, detailed analysis of the SSL (Security Socket Layer) protocol to achieve the principle and mechanism based on the VPN to study the security of SSL VPN, mainly SSL protocol security mechanisms. The existence of the SSL VPN security vulnerabilities and security threats, including data source information, ignore the handshake protocol vulnerability, not on the calculation of key data fields for MAC key exchange vulnerabilities and vulnerable to brute force the key length of the vulnerability, and SSL VPN environments are vulnerable to security threats. And put forward for these security vulnerabilities and security threats by the attacks.In front of the SSL VPN security vulnerabilities and threats, based on the handshake protocol for this paper exploit the vulnerability instance. Examples include the use of loopholes in the theory, design and implementation of system exploits, and exploits the completion of the experiment. Through the entire process of research to further exploit the vulnerability described the threat to the SSL VPN and the destructive effect produced, so that existing SSL VPN is necessary for improvement.Finally, the proposed security vulnerabilities and security threats, made suggestions for improvement, and targeted programs, and analyze these solutions bring to the SSL VPN to enhance security, and resistance attacks against the ability of these security issues...