SNMPv3 Security Analysis And The Improving On It In Network Management Application

With the rapid popularization and development of the computer network, computer network becoming larger and larger, and the control over it becoming more and more complicated too, so network administrator need a perfect and powerful network management protocol.SNMP was accepted extensively with its simple and practical, and became network management standard in fact, at the same time,its security becomes the focus that everybody pays close attention too. SNMP is the third edition till now from its first initial edition,in this period it has gone through very great improving , especially in security aspect. This paper launched research around the security feature of SNMPv3.Firstly, this paper describes the basic operation principle , structure characteristic , evolution of SNMP briefly; And then introduced the security feature of SNMPvl and SNMPv2 and its safe defect, so as to dimple the necessity of making SNMPv3 ;then, have explained the architecture of SNMPv3, Encryption algorithm used in SNMPv3 and carrying on in-depth analysis to the security of SNMPv3 on these basis. As a network management protocol made in 1998, the safety measures of SNMPv3 was enough to let the network administrator at that time haveconfidence in it, this is one of the reasons why SNMP becomes the standard virtually in network management. However, with the development of technology in the computer area at full speed, especially the violent improvement of the computational speed, SNMPv3 cann't give network administrator enough sense of safety as the past years, finally, The author has proposed improving at two aspects of SNMPv3.Firstly,the author painstaking analysis to the replay protection of SNMPv3 , has proposed measure to strengthen the reply protection in SNMPv3 at present time; Secondly, in VPN there are high security demand to manage information, author combine some concrete demand of VPN and institutional framework of MIB, has proposed the supplementary content of MIB II used by SNMPv3 in order to make it suitable for demand of VPN.