基于园区网络的主动安全模型设计与研究

基于园区网络的主动安全模型设计与研究 Design and Research of the Active Security Models of Network Based on the Campus Network 张峰 ZHANG Feng~1 1 2 3 first-author 于志平 YU Zhi-ping~1 1 2 3 苏利 SU Li~2 1 2 3 中国地质大学计算机系 中国地质大学计算机系 Department of Computer Science and Technology, China University of Geosciences Department of Computer Science and Technology, China University of Geosciences 武汉大学电子信息学院,湖北,武汉,430074 武汉大学电子信息学院,湖北,武汉,430074 School of Electronic Information, Wuhan University School of Electronic Information, Wuhan University ,湖北,武汉,430072 ,湖北,武汉,430072 从现行典型园区网络安全设计方案入手,结合其在安全防范解决方案上存在的问题,提出了一种网络主动安全模型;在全局网络安全认识的基础上,阐述了模型组成部件的功能定义和网络主动安全实现流程;采用统一网络入口认证、网络知识发现及资源有效控制、沟通等手段,解决了现行网络安全设计中存在的恶意攻击行为源头定位困难,以及信息安全司法取证不准、网络资源安全被动防护、网络灾难快速反映能力差等问题.实验结果表明,该设计方案具有较好的可行性和实用性. The article aims at the project of nowadays typical Campus network security,analyses the leak in the passive security defense. So it puts forward the model of the active security of network project and the description of realization flow of the active security of network.It also clarifies that based on the whole network security, the project use the unified network entrance authentication, network knowledge discovery ,resource control/ communication,etc. It can solve the hostile attack source existing in the current network security design and orient the difficulty, The safe administration of justice of the information collects evidence inaccuratly, the passive defense of network resource security, the bad reaction ability of the network catastrophe, the question like that.The experimental result indicates , this plan of design has better feasibility and practicability. 主动安全 CA认证中心 网络结构 active security CA（certificate authority） network structure TP393.08 国土资源部专项基金资助项目（992051） 2004-01-01 2021-04-01 1