Security policy deployment in IPsec

Abstract

Security policy system defines the basic rules and strategies for information security systems, e.g., IPsec, IKE, and Firewalls. But due to the heterogeneous network security systems and the corresponding applications of security policy system, it is difficult to build up a unified policy database and deploy it efficiently. In this paper, we propose a unified security policy database schema to be applied to IPsec system and a synchronous methodology of security policy deployment with controlling network schedule. By these, we can guarantee more efficient security services in the policy-based distributed network.