基于容侵技术的电力企业网络安全体系模型  

Network security model of power enterprise based on intrusion tolerance technology

作　　者：孙夫雄[1] 汪阳[1] 余智欣[1] 黄天戍[1] 

机构地区：[1]武汉大学电子信息学院,湖北武汉430072

出　　处：《电力自动化设备》2004年第10期31-34,共4页Electric Power Automation Equipment

摘　　要：介绍了网络安全体系的发展过程,指出网络防火墙配以入侵检测系统的体系结构由于误检、漏检率较高,往往影响到整个网络的服务性能。针对电力企业网络安全与管理,引入网络容侵的原理,提出一套企业网络安全模型。模型设计一方面提升网络系统自身的容侵能力,另一方面设置网络行为的置信度评价机制,加强对置信度低的网络行为的跟踪和分析,在保证正常网络服务质量的同时,提高网络安检系统的准确性及自适应学习能力。The development process of network security is introduced.With high false alarm rate and alarm missing rate,the network architecture of network firewall and intrusion detection system often weakens the performance of enterprise network services.A network security model based on intrusion tolerance technology is put forward for power enterprises.The design is to improve the capability of intrusion tolerance,as well as to strengthen the tracking and analysis of lower - credit network actions with a set of credit valuation mechanism.The model helps to improve the detection veracity of network security system and the self - adaptive learning capability,while the normal network service quality is ensured.

关 键 词：网络安全体系 网络防火墙 入侵检测系统 自适应学习 网络行为 安全模型 企业网络 电力企业 技术 能力 

分 类 号：TM910.1[电气工程—电力电子与电力传动] TP393[自动化与计算机技术—计算机应用技术]