Browse > Article
http://dx.doi.org/10.6109/jkiice.2008.12.4.643

Open Based Network Security System Architecture  

Kim, Chang-Su (청운대학교 인터넷학과)
Jung, Hoe-Kyung (배재대학교 컴퓨터공학과)
Abstract
If existing system need to expand security part, the security was established after paying much cost, processing of complicated installation and being patient with inconvenience at user's view because of closed structure. In this thesis, those defects could be overcome by using open security tools and constructing security server, which is firewall of 'bastion' form including proxy server, certification server and so on. Also each security object host comes to decide acceptance or denial where each packet comes from, then determines security level each hosts. Precisely it is possible choosing the packets from bastion host or following at the other policies. Although an intruder enter into inside directly, it is constructed safely because encryption algorithm is applied at communication with security object host. This thesis suggests more flexible, independent and open security system, which improves existing security through systematic linkage between system security and network security.
Keywords
Network Security; Proxy Server; Bastion Host; Encryption Algorithm;
Citations & Related Records
연도 인용수 순위
  • Reference
1 채규혁, 인터넷 방화벽 구축하기, 한빛 미디어, 2001
2 한국전산원, 방화벽 프로토타입 개발 보고서, 1996
3 Dieter Gollmann, Computer Security, John Wiley & Sons, 2006
4 Elizabeth D. Zwicky, Simon Cooper, D. Brent Chapman, Building Internet Firewalls, O'Reilly & Associates, 2000
5 한국 정보보호센터, Firewall 시스템 총서, 1996
6 한국 전산원 표준본부, 방화벽 시스템의 구축과 운용, 1996
7 최용락 외 3인, 통신망 정보 보호, 도서출판 그린, 2002
8 Norbert Pohlmann, Tim Crothers, Firewall Architecture for the Enterprise, John Wiley & Sons, 2002
9 Loza, Boris, Unix, Solaris And Linux : A Practical Security Cookbook: Securing Unix Operating System Without Third-party Applications, Lightning Source Inc, 2005
10 Raymond R.Panko, Corporate Computer Network Security, Prentice Hall, 2003
11 김재선, about Firewall & Network Security, 영진.com, 2002
12 Simson Garfinkel, Gene Spafford, Practical UNIX & INTERNET Security 3rd edition, O'Reilly & Associates, 2003