Dissertation
Dissertation > Industrial Technology > Automation technology,computer technology > Computing technology,computer technology > Computer applications > Computer network > Local area network (LAN), metropolitan - area network (MAN)

Design and Implementation of VPN Gateway Based on SSL

Author QiFan
Tutor QuanYiNing;WenXiaoJun
School Xi'an University of Electronic Science and Technology
Course Computer technology
Keywords SSL VPN access control security detection
CLC TP393.1
Type Master's thesis
Year 2010
Downloads 77
Quotes 0
Download Dissertation

This thesis mainly researches the SSL session and access control in SSL VPN system. Based on SSL protocol, authentication, access control, an efficient and secure SSL VPN is implemented, and the implementation of SSL session and the access control mechanism is described in detail. The main contributions are as follows:(1) The technology related to SSL VPN is analyzed, and a VPN tunnel is established based on SSL, so as to ensure the secure authentication. The management of the SSL connection is also achieved.(2) Based on analyzing access control and RBAC, an access control mechanism adapting SSL VPN is proposed. The access control mechanism of aventail 1.0 SSL VPN system is inefficient and not fine-grained enough. This system improves role based access control module, and efficiently manages user group, resource group, relationship between users and resources.(3) Client security detection policy is integrated in the system, thus the system can estimate security state of the client and achieve dynamic authorization combining the role’s access policy.

Related Dissertations
More Dissertations