Summary: | 碩士 === 國立成功大學 === 資訊工程學系碩博士班 === 97 === With the development of network technology, there are more network services provided in our daily life, and therefore it is getting important to protect network security. In traditional hierarchical network architecture, there are many kinds of security algorithm performed in every layer respectively to protect network security. However to perform security algorithm will cause huge overheads on system performance. Thus it is difficult to protect network security and maintain system performance at the same time.
In the thesis, we manage network security by using Cross-Layer Design (CLD) technique. By integrating security algorithms provided in layers, we fulfill the user-demand security requirement and maintain system performance. First, we analyze the importance of security dimensions in different network services according to potential security threats. Next, we quantify security and performance of security algorithms by their cracked and executing time. Then, by using the Cross-Layer Design approach and mentioned analyses and quantified results, we derive a suitable Cross-Layer security composition to satisfy the user-demand security requirement and maintain system performance.
Finally, according to the simulated results, we show that the derived security composition not only fulfills the user-demand security requirement but also improves system performance in different network services and environments.
|