Research And Implementation Of IKE Based On Windows2000

With the continuous deepening research and the continuing popularity application of the computer network technology , the computer network security has become the core issue of wide concern in academic and business circles. Especially, as the widespread application of internet network, the network for internet security research is of great theoretical significance and value. Currently, one of the most extensive application of network security technology is VPN (Virtual Private Network) on the internet, and IPSec is one of the most popular way for the realization of VPN. IKE(Internet Key Exchange) protocol is the key exchange and management protocol of the IPSec. This paper is concerning IKE research and design based on the windows 2000. Its main work is as follows:In this paper, for the deficiencies of IKE protocol based on the basis of the analysis of IPSec framework, it was proposed the structural design and improvement of methods based on the IKE firstly. Secondly, against the problems of the internet DDoS (Distributed Denial of Service) attack, I give out the improved method to withstand the DDoS attacks, and make the protocol defend the DDoS attacks efficiency. Finally, I design and implement of the IKE base on the improved methods above.