Research on IPSec inter-policy analysis technology
Han Ling-li · Jisuanji gongcheng yu sheji · 2007
Although IPSec supports a rich set of protection modes and operations,its policy configuration remains a complex and error-prone task.Based on formal modeling technology and ordered binary decision diagrams,a comprehensive framework is developed to classify and identify conflicts that could exist between different IPSec devices(inter-policy conflicts) in enterprise networks.Testing and evaluating on study on different network environments demonstrates the effectiveness and efficiency of the approach.