毕业论文三级目录及摘要和参考文献.docx

毕业论文三级目录及摘要和参考文献摘 要无线网络飞速发展,人们在充分享受各种无线接入网络便利的同时，各种安全问题也逐渐暴露出来。由于ipsec 能够提供较好的安全保护，能够有效解决上述问题，应用范围不断扩大。在传统的tcp协议中，假设丢包都是由网络拥塞造成的，这不适用于错误丢包比拥塞丢包更容易发生的无线链路。此时，启用拥塞控制机制，将导致tcp端到端的性能降低。而且现有的很多改进方案无法用于加密通信中,因为ipsec与tcp在无线网络中的改进方案之间存在冲突。在无线通信网络中，要保证通信的安全性和tcp协议的性能，就必须解决他们之间的冲突。而在在vpn系统的大规模应用中，由于其部署环境复杂,也面临不同软件在ndis内核框架中的冲突和内核模块开发,移植,维护困难等问题。在对目前流行的基于windows平台的vpn系统体系结构及其实现技术进行深入分析的基础上，针对嵌入式终端的特点，提出了一种新的基于虚拟网卡的技术,详细阐述了其原理和优点。然后给出了在wince vpn系统中实现该技术的体系结构,能够从根本上解决上述问题。根据应用存在的性能问题,对现有的各种无线网络下tcp性能改进机制与ipsec vpn的兼容性进行了详细的分析,比较各种可能方案之间的优点与缺点。在分析现有改进算法的基础上，提出了一种适用于有线/无线混合网络ipsec兼容的端到端的优化机制。通过接收端数据包到达时间间隔的变化累积来判断无线链路的状况，用ack标记eln通知发送端，避免不必要的拥塞控制而导致性能下降。通过ns2仿真实验, 并与tcp reno进行了性能对比。结果表明，该机制能有效提高tcp在无线移动场景下的网络传输性能,同时和现有的安全机制也相兼容。关键词：tcp ；vpn体系结构;虚拟网卡;有线无线混合网络；性能评价；拥塞控制；端到端abstractwhile wireless access technology has experienced a rapid growth in recently years.the people while fully are enjoying each kind wireless, a number of security concerns have been raised for wireless networks in general. tcp is originally designed only for wired network and assumes that any loss is due to congestion. however, it is different in wireless situation in that wireless errors are more likely to occur than congestion. such non-congestion packet loss, when dealt with invoking a congestion control algorithm, resulting in degrade end-to-end performance. at the same time, many exist approach can not work when the encryption is used in the communication. so the security mechanism and tcp improving mechanism compatibility also is taken into considering of our works. but in the large-scale application of vpn system, because the deployment environment is complex, frequently can face the different software in ndis kernel frame conflict, simultaneously the kernel module development, the transplant, maintains question and so on difficulty.this paper deeply analyses the popular architecture and implement technology based on windows vpn system structure, simultaneously aims at embed terminal characteristic, proposed one kind new based on virtual network card technology, in detail elaborated its principle and the merit. the produced system has realized this technical system structure in wince vpn, could fundamentally solve the above problem.aiming at the performance problem of vpn apply , this paper proposed a new end-to-end tcp performance improving mechanism, by using the interval movement cumulated of the packets received time on receiver, which can estimate the wireless link condition. then it marks the eln（explicit loss notification）bit to notify the sender and tcp could be modified so as to refrain from going into congestion avoidance. comparing the tcp reno and the modified tcp ,by simulations using ns2，the results show it achieves an great improvement over mobile wireless networks and can work together with current security mechanism.keywords：tcp ; virtual network card; wired-cum-wireless networks ; performance evaluation; congestion control end-to-end ; ipsec; vpn architecture目 录学校代码10487 密级i摘 要iabstractii目 录iv1绪 论11.1研究背景11.2国内外研究现状31.3主要研究内容62无线网络vpn解决方案82.1无线网络tcp与vpn协议82.2无线tcp性能改进模型152.3tcp改进方案性能分析与ipsec兼容性解决方案222.4*小结243基于虚拟网卡的vpn体系结构253.1基于windows vpn系统设计253.2新的vpn体系结构图283.3虚拟网卡启动流程323.4报文处理过程的分析333.5*小结344新的无线tcp性能改进方案364.1ns2仿真工具的介绍364.2modified-tcp的定义374.3modified-tcp的设计思想384.4时间变化累计的计算424.5modified-tcp改进的实现434.6*小结455vpn系统结构分析和性能评价475.1与传统vpn体系结构的比较475.2tcp改进模型性能的评估标准475.3modified-tcp参数分析485.4modified-tcp性能分析495.5*小结526总结与展望546.1总结546.2展望55致 谢56附录1 攻读学位期间发表论文目录60参考文献1.majstor, f. wlan security threats solutionsc. in lcn 03. xx.2.park, j.s. dicoi, d., wlan security: current and futurej. internet computing, xx. 7(5): p. 60 - 65.3.liang, c.z.h.f.h. a new authentication and key exchange protocol in wlanc. in itcc xx. xx.4.rfc2401, security architecture of the internet protocols, , ietf,*ietf 1998.5.京京工作室, ipsec:新一代因特网安全标准. 1999, 北京: 机械工业出版社.6.alshamsi, a. saito, t. a technical comparison of ipsec and ssl c. in aina xx. xx.7.林闯单志广任丰原, 计算机网络的服务质量(qos). xx, 北京: 清华大学出版社. 4-9.8.h, b., s. s, and k.r. h, improving reliable transport and handoff performance in cellular wireless networks j. 1995. 1(4): p. 469-481.9.hui-min, l.y.y.m.z. improve tcp performance over wireless linkc. in pimrc xx. xx.10.rfc1631, the ip network address translator (nat), , ietf,*ietf 1994.11.rfc2709, security model with tunnel-mode ipsec for nat domainss, , ietf,*ietf 1999.12.rfc2341, cisco layer two forwarding (protocol) l2f, in ietf1998.13.rfc2661, layer two tunneling protocol l2tp, in ietf1999.14.rfc2153, the point-to-point protocol (ppp), , ietf,*ietf 1994.15.rfc2865, remote authentication dial in user service (radius), , ietf,*ietf xx.16.rfc1701, generic routing encapsulation (gre), , ietf,*ietf 1994.17.bakre, a. badrinath, b.r. i-tcp: indirect tcp for mobile hostsc. in distributed computing systems, 1995., proceedings of the 15th international conference. 1995.18.bakre, a.v. badrinath, b.r., implementation and performance evaluation of indirect tcpj. computers, 1997. 3(46): p. 260 - 278.19.i.rhee,n.balaguru,s seshan, a.g.n.r. mtcp:scalable tcp-like congest control for reliable multicastc. in infocom. 1999.20.t.goff,j. moronisk, d. s.phatak, a.v.g. freeze-tcp:a true end-to-end tcp enhancement mechanism for mobile environmentsc. in infocom. xx.21.林华生，程时端, 移动自组织网络中tcp性能优化的研究. 计算机工程与应用, xx. 12(12).22.符刚. 移动vpn解决方案. in 无线及移动通信委员会学术年会论文集. xx.23.g. de blas, m. patrono, l. marra, p. tomasicchio, g. an ipsec-aware tcp pep for integrated mobile satellite networks ciccaresec. in personal, indoor and mobile radio communications, xx. xx. italy: ieee international symposium onpublication.24.尤晋元史美林陈向群, windows操作系统原理. xx, 北京: 机械工业出版社.25.陈向群王雷马洪兵等编著, windows 系统分析及实验教程. xx, 北京: 机械工业出版社.26.ding w, j.a. a a new explicit loss notification and acknowledgement for wireless tcp c. in pimrc xx. xx. san diego ca.27.stevens, w.r., tcp/ip详解卷1. vol. 1. xx, 北京: 机械工业出版社.28.rfc2409, the internet key exchange(ike)s, , ietf,*ietf 1998.29.rfc2402, ip authentication header s, , ietf,*ietf 1998.30.rfc2406, ip encapsulation security payload (esp)s, , ietf,*ietf 1998.31.kurose, j.f. and k.w. boss, 计算机网络自顶向下方法与internet特色. xx, 北京: 机械工业出版社. 335-338 341-355.32.rfc2883, an extension to the selective acknowledgement (sack) option for tcp, , ietf,*ietf xx.33.ohzahata, s. kimura, s. ebihara, y. kawashima, k. a queue management method for improving tcp performance in wireless environmentsc. in wcncxx. xx.34.omotayo, a. williamson, c., multi-layer analysis of web browsing performance for wireless pdasj. local computer networks, xx: p. 660 - 667.35.min, x.w.z.l.j.s.y., bit-error identification for tcp performance improvementc. emerging technologies: frontiers of mobile and wireless communication, xx. 2(2): p. 561 - 566.36.shagdar, o. shirazi, m.n.b.z. improving ecn-based tcp performance over wireless networks using a homogeneous implementation of ewlnc. in ict xx. xx. kyoto, japan.37.邓晓衡陈志刚,张连明, tcp yuelu: 一种基于有线/无线混合网络端到端的拥塞控制机制. 计算机学报, xx(8): p. 1342-1350.38.m. gerla, m. y. sanadidi, r.w., tcp westwood: bandwidth estimation for enhanced transport over wireless links. ucla computer science, xx.39.江小丹,李宏,李晃等, 显式丢失通告算法的实现及其性能分析. 计算机工程, xx. 29(18).40.chinta, m. helal, a. lee, c. ilc-tcp: an interlayer collaboration protocol for tcp performance improvement in mobile and wireless environmentsc. in wcnc xx. xx.41.zorzi, m. on the analytical computation of the interference statistics with applications to the performance evaluation of mobile radio systemsc. in communications, ieee transactions. 1997.42.vacirca, f. de vendictis, a. baiocchi, a., optimal design of hybrid fec/arq schemes for tcp over wireless links with rayleigh fadingj. mobile computing, xx. 5(4): p. 289 - 302.43.vacirca, f. de vendictis, a. todini, a. baiocchi, a. on the effects of arq mechanisms on tcp performance in wireless environmentsc. in globecom 03. xx.44.haas, z.j. agrawal, p. mobile-tcp: an asymmetric transport protocol design for mobile systemsc. in icc 97. 1997.45.chan, m.c. ramjee, r. improving tcp/ip performance over third generation wireless networksc. in infocom xx. xx.46.ratnam, k. matta, i. wtcp: an efficient mechanism for improving tcp performance over wireless linksc. in iscc 98. 1998.47.yizhou li jacob, l. proactive-wtcp: an end-to-end