指挥控制系统的信息安全要素  

Problem of Information Security in C^3I System

作　　者：刘建永[1] 杜婕[1] 

机构地区：[1]解放军理工大学工程兵工程学院,江苏南京210007

出　　处：《兵工自动化》2004年第4期1-3,共3页Ordnance Industry Automation

摘　　要：指挥控制系统的信息安全包括保密通信、信息认证、入侵检测和病毒防范。系统易受攻击的环节是局域网与通信链路,需采取链路加密和端到端加密措施。报文信息的鉴别认证可采用差错控制码、报文鉴别码与数字签名进行。采用反常检测统计和基于规则的检测技术进行入侵检测。病毒防范可采用反病毒软件、防火墙、类属解密和数字免疫系统等新型反病毒措施。Information security of the C3I system includes communication security, information authentication, intrusion detection and virus defence. Parts easy to attack in the system are LAN and communication link, which need to take link encrypting and point-to-point encrypting. Message information may be authenticated with error-control code, message authenticated code and digital signature. Statistical abnormality examining and examining based on rule are generally accepted in intrusion detection module. Virus defence includes antivirus software, fireproof, generic decryption and digital immunity system.

关 键 词：保密通信 报文鉴别 入侵检测 病毒防范 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]