论文部分内容阅读
网络发展的趋势是通过给已经存在的硬件增加附加功能来简化管理和控制成本。但通过安全和VPN(virtual private networks),一些网管人员采取了另外的方法:为网络添加单独使用的硬件以优化安全管理和加密。用于网络安全的专用硬件之所以赢得了相当的用户群,这主要有如下三个原因。首先,它提高了网络性能,由于基于加密的安全处理可能会降低网络速度。例如,根据Infonetics公司的调查统计,采用DES(Data Encryption Standard)标准加密要比一个通常的IP数据包要求强25倍的处理能力;第二,由于技术上非常复杂,同时从策略上来考虑,管理人员不愿意因为新的软件集成到已经存在的产品中而可能造成更多问题;第三,一些网络经理认为将加密信息单独保存在网络之外更安全。用户对基于硬件的加密需求使得一些加密产品提供商改变了他们公司的策略。例如Symplex数据通讯公司正在开发一种被称作为Datamizer VI的T-1线路的压缩引擎(Compression engine)。这一设备最初设计是具有内暨的基于软件的DES以及三倍
The trend in network development is to simplify management and control costs by adding additional functionality to existing hardware. But through virtual private networks, some network managers have taken another approach: adding separate hardware to the network to optimize security management and encryption. Dedicated hardware for network security has won a considerable user base, mainly for the following three reasons. First, it improves network performance, which may slow down the network due to the security-based encryption. For example, according to Infonetics survey, data encryption using DES (Data Encryption Standard) standard requires 25 times more processing power than a typical IP packet. Second, because of the complexity of the technology and tactical considerations, People are reluctant to introduce more problems because new software is integrated into existing products. Third, some network managers find it safer to keep encrypted information alone outside the network. Users’ demand for hardware-based encryption has led some crypto-product providers to change their company’s strategy. For example, Symplex Data Communications is developing a Compression engine called the T-1 line of the Datamizer VI. This device was originally designed to be software-based DES with cum cum