基于可信网络的分布式防火墙架构  

A Distributed Firewall Architecture Based on Trusted Network

作　　者：张彤[1] 段德全[1] 李雪[2] 

机构地区：[1]西安理工大学计算机科学与工程学院,西安710048 [2]长安大学信息工程学院,西安710064

出　　处：《计算机工程》2006年第11期183-185,共3页Computer Engineering

摘　　要：随着基于Internet的网络环境不断复杂化,防火墙、入侵检测以及可信计算等安全性技术也逐渐成为这一领域研究的焦点。在可信计算概念基础上,建立了一个验证(Attestation)方式的可信网络模型,并提出了一个基于该模型的分布式防火墙(Distributed Firewall)架构,根据既定的安全策略对接收到数据包和发送出的数据包进行安全性检测分析,以成功地实现网络的安全性和可信性。With the increasingly complicated of the network environment based on Internet, the studies of security technologies like firewall, IDS, and trusted computing are becoming hotter and hotter. Based on the idea of trusted computing, a network model is set up using the attestation method, and a distributed firewall architecture is offered based on the model. With the plan, the coming in and out packets will be checked according to special secure policies, to achieve the security and trustiness completely.

关 键 词：可信计算 可信网络 分布式防火墙 IPSEC 安全策略 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]