Abstract:IPSec has been proposed to provide integrity, confidentiality and authentication of data communications over IP networks. However, the complex semantics of IPSec policies results in potential conflicts, such as shielding conflict, redundancy conflict and overlapping conflict, et al. The conflict should be identified and detected to avoid Internet security threat. However, there has no research on identifying and defining IPSec security policy conflict formally and comprehensively. So it is necessary to give a depth analysis on policy conflict. Therefore, the paper presents a generic model that represents IPSec security policy semantics. Based on it, we classify and define conflicts formally that may exist in a single IPSec device or in some tunnels between different IPSec devices. That the conflict analysis is comprehensive is proved also. The research provides theoretical foundation for policy conflict detection and prevention in IPSec policy configuration

The research of IPsec system and its policy management mechanism

Research on Information Security Model and Security System Design

Toward A Practical Scheme For Ipsec Management

Research & Implementation of Security Communication Mechanism for Virtual Private Network

Design and Implementation of IP Security

Research of Security&Privacy Management Lack Based on Telecommunication Network

Key exchange implementation and security analysis for IPSec based virtual private network

Title: the Network Layer Safety Protocol-IPSec Little Improvement

A Policy-Based Network Management System For Ipvpn

A Security Analysis of the IPSec Based WLAN Solution and a Study of Its Algorithm

Research of Strategies to Enhance VPN's Adaptability

THE RESEARCH OF IPSEC SECURITY AUDIT MECHANISM IN IPV6 ENVIRONMENT

Study of Implementing IPSec under the Linux Platform

Research and Implementation of one Kind of IPSec -based VPN in Linux

Application of IPSec Technique to VPN

Research for Network Security System Design

Design and Implementation of the Security Policy System in VPN Systems

Research on IPSec Prameter Negotiation Process Based on IKE

THE RESEARCH AND IMPLEMENTATION OF INTEGRATED SECURITY MANAGEMENT PLATFORM

Research of the campus E-government network security management

Analysis And Classification of IPSec Security Policy Conflicts