架構高安全性資料通訊管道於企業虛擬私有網路

Abstract

在企業傳統的資料傳遞架構中，為了安全地傳遞資料，需添購昂貴資訊安全硬體設備或是應用軟體，隨著攻擊活動日新月異的變化，企業需要付出更多的代價來升級與替換安全軟硬體設備。本論文利用開放原始碼軟體（open-source software）的組合，來達到低建制成本與低維護成本並達到加強資料傳遞時之安全性。也因為開放原始碼軟體的高公開性，讓此系統可以針對實際需求來做適當的特性調整，讓企業跨國網路對資料傳遞時安全性的保障彈性更大。 開放原始碼軟體間的搭配整合度不高，需要記憶許多不同種類的使用方式與操作步驟，非常容易出錯，造成系統潛在性不安全。因此本論文利用 Tcl/Tk 適合開發圖形介面的特性，撰寫一個友善的圖形操作介面，來協助管理人員可以輕易地透過單一圖形介面來完成系統的所有功能，避免操作的風險，同時降低維護的成本與使用的障礙。

In traditional enterprise data center, a huge amount of investment on hardware and software to keep the data transfer safe and secure. Facing the evolution of network attack day by day, more and more expense are necessary and inevitable on upgrade both software and hardware. However, open source software (OSS) community keeps decent close step on security update which offers an opportunity for better security and less expense. Due to the nature of OSS, the developers are distributed overall the world and different project are built on different style . It is very difficult to integrate various security OSS projects together and to serve in consistent direction. In this thesis, a robust environment is developed to solve the security problem on enterprise extranet data exchange. This solution provides lower expense and faster the security update on basis of OSS. It includes operation interface on OSS packages and a sophisticated graphical user interface (GUI). On this GUI, it reduces the operation barrier on system administrator and reduces the risk on operation mistakes, especially built on different OSS packages. The GUI is written on popular Tcl/Tk language for easier maintenance and low development error.