Web-based Security Management System for IPsec

摘要

IP security or IPsec Protocols are designed to provide various security services at the IP layer for IPv4 and IPv6. The monitoring and control of IPsec is necessary to provide security service effectively. The management of IPsec allows system manager to determine operating conditions and perform operational monitoring of IPsec in networks. Several MIBs related to the management of Internet security services are IPsec Monitoring MIB and IKE Monitoring MIB. These are monitoring and status MIBs for IPsec SAs and define operational monitoring of IPsec and statistics of IPsec SAs. In this paper, we describe related work and analyze the management information for IPsec SAs. We present the design and implementation of Web-based Security Management System for Ipsec (SMS). SMS collects SAs between host and gateway or end hosts. It also monitors AH and ESP traffics, then evaluates the performance of IPsec and notifies the problem of IPsec by auditable event. In this paper, we implement SMS using Java and Web technology, and we have easy access to SMS remotely in real time. There are various benefits such as platform independence and scalability.