【正文】 —— 文獻(xiàn)翻譯 題 目 IP 協(xié)議 及 IPSec 協(xié)議安全分析 學(xué)生姓名 專業(yè)班級 計(jì)算機(jī)科學(xué)與技術(shù) 20201 班 學(xué) 號 56 院 (系 ) 計(jì)算機(jī)與通信工程學(xué)院 指導(dǎo)教師 ) 完成時(shí)間 2020 年 6 月 6 日 1 英文原文 The Analysis Of IP and IPSec Protocol’s Security Problem 1. OSI model in time for TCP/IP protocol Overview OSI model in time for TCP/IP protocol introduce It was repose International Organization for Standardization’ suggest to whereas extend arisen39。, it broke into seven layer into to that OSI model (open system interconnection reference model). The overdone bulkiness, intricacy incur know clearly heap criticism of the is ISO constitutive OSI reference model. As shown in the following chart Application layer Application layer Presentation layer Session layer Transport layer Transport layer Network layer Network layer Data link layer Network interface layer Physical layer Graphic OSI model and TCP/IP model The practical application sense nope very large, thereof forsooth toward fathom work protocol interior wield did very avail out of the refer to work cannot but talk OSI reference model, notwithstanding OSI reference model. In reins work world liner, TCP/IP protocol suite obtain know clearly still for extensive application. These OSI seven layer model suffer, per layer big city provide thereon thickness with, bine one visit mouthpiece or interface. The homology hierarchy entitled peer layer of the differ mainframe of partment. Stand for and mainframe B menses presentation layer each other for 2 peer layer, mainframe A menses session layer and mainframe B menses session layer each other for peer layer grade among as if mainframe A. Session layer and stand for (these doubledeck function by merge to application layer realize) among at TCP/IP reference model suffer, take out know clearly OSI reference model. TCP/IP presence frangibility It was run low of virtual security authentication and crypto system, there into up most factor namely IP address problem that IP layered major defect. R mand , NFS, X window grade big city is repose IP address versus user proceed authentication and authorization to among that of TCP/IP protocol with IP address came by way of work node alone one identification, heap TCP/IP serve, include Berkeley. Source IP address estimation pact technique authenticity and security among both that of currently TCP/IP cellular security mechanism primarily repose IP address WRAPT filtration(packet filtering) and authentication (authentication) technology, its validity incarnate at could warranty IP WRAPT. The shield, sans versus IP fold misogyny IP address authenticity 39。authentication mechanism and security measure in of whereas IP address lie heap problem, consultative maxima shorting namely sans versus IP address. It was repose IP protocol of last, TCP subsection and UDP protocol data packet is encapsulation be on the security menace of IP WRAPT suffer at work upper Tran missive, wherefore sameness be confronted with IP layer station encounter that owing to UDP. Now that people all the while in thought method set, yet still avoid less namely as per TCP tie hour in at rest thrice handshake Machinemade attack. Either these attack summarize arisen include： One: source address cheat(source address spoofing) or IP cheat(IP spoofing)； Two: source routing select cheat(source routing spoofing)； Three: rip attack(rip attacks)； Four: discriminate attack(authentication attacks)； 3 Five: TCP serial number cheat(TCP sequence number spoofing)； Six: TCP/IP protocol data stream adopt plaintext transmission； Seven: TCP serial number BOMB attack(TCP SYN flooding attack), for short SYN attack； Eight: easy fraudulence (ease of spoofing). Network Security Both moiety end user versus thereof visit, furthermore enterprise work proper no more will exterior closed among be mainframe puter system suffer among it was one relatively walkway that it was resource that both that of one be indispensable to whereas important factor among Network security right through data work. Preparatory work suffer, none but calculator proper and application. Shield this resource. Confidential data by memory at one fit on glass hall. Past crypto guard make inspect weight, nothing but allowed at enterprise work. Versus heap government sector and academic institution came said, inter except one design to transponder electronic mail and proceed document transmission’ instrument. There be the resource pleteness exposure at hacker, juggler and those hellion’ attack of down, there into likely to return include some immoral numerator in order to or certain still ugly motive station ongoing destroy of it was pleteness visible that the revolution transfer know clearly possession all these of the both inter and puter technology. Now, calculator full high speed, cheapness bine possess resolvability, general design to depot private and confidential information. Inter in the range of get folk in an OSI to at global proceed without a hitch corresponding also, thereof unreliability no more will conceivable. These purport end user transmitting data station utilized work element likely to met absence their dam within sight back. If data proper yes confidential, it with met expose likely to burglar, by have no right limit user check or bowdlerize through to. In the meanwhile, special enterprise work too need for use inter bine therewith mutual to. Inter at advertisement and ebusiness aspect repose whereabouts huge business opportunity, versus user came said inter must. Figure full high speed, cheapness bine possess resolvability, general design t