Optimized design of SPD for NGI
Lu Ningning, Huachun Zhou, Dong Kai-hong, Hongke Zhang · 2009
IPsec is also an important security protocol for next generation internet (NGI) and it has become a hot topic in security communication research to increase IPsec's performance without any security decreasing. In this article, we analyze the implementation of IPsec's security policy database (SPD) and its searching method. We also proposed an optimized design for the SPD with hash table based on chaining addressing to improve its performance and scalability. Finally, we compare our new method with the existing one and find that our new SPD design could effectively reduce the average searching length of security policy.