An Adaptive Cross-Layer Design Approach for Network Security Management

碩士 === 國立成功大學 === 資訊工程學系碩博士班 === 97 === With the development of network technology, there are more network services provided in our daily life, and therefore it is getting important to protect network security. In traditional hierarchical network architecture, there are many kinds of security algor...

Full description

Bibliographic Details
Main Authors: Chou-Ting Hsieh, 謝周廷
Other Authors: Yau-Hwang Kuo
Format: Others
Language:en_US
Published: 2009
Online Access:http://ndltd.ncl.edu.tw/handle/64191416657245367430
Description
Summary:碩士 === 國立成功大學 === 資訊工程學系碩博士班 === 97 === With the development of network technology, there are more network services provided in our daily life, and therefore it is getting important to protect network security. In traditional hierarchical network architecture, there are many kinds of security algorithm performed in every layer respectively to protect network security. However to perform security algorithm will cause huge overheads on system performance. Thus it is difficult to protect network security and maintain system performance at the same time. In the thesis, we manage network security by using Cross-Layer Design (CLD) technique. By integrating security algorithms provided in layers, we fulfill the user-demand security requirement and maintain system performance. First, we analyze the importance of security dimensions in different network services according to potential security threats. Next, we quantify security and performance of security algorithms by their cracked and executing time. Then, by using the Cross-Layer Design approach and mentioned analyses and quantified results, we derive a suitable Cross-Layer security composition to satisfy the user-demand security requirement and maintain system performance. Finally, according to the simulated results, we show that the derived security composition not only fulfills the user-demand security requirement but also improves system performance in different network services and environments.