自免疫网络安全防御体系研究  

Research on the Security Architecture for the Self-immune Network

作　　者：王新年[1] 冯珊[1] 周凯波[1] 周剑岚[1] 

机构地区：[1]华中科技大学系统工程研究所,武汉430074

出　　处：《武汉理工大学学报》2006年第6期90-92,共3页Journal of Wuhan University of Technology

摘　　要：针对计算机网络普遍容易遭受黑客、病毒及大量垃圾信息的侵蚀,对未知异常事件和异常流量等不能作出及时反应,在保护“自我”拒绝“非我”的基础上提出了基于主动探测、主动报警和主动清除为主的自免疫网络安全防御体系,并给出了自免疫网络的基本组成以及基于网络设备认证、网络流量分析、主机接入认证的实现,从而达到保护计算机网络安全运行的目的。A new concept of network security for the self-immune network based on two principles, namely protecting self and preventing nonself, was presented. The security architecture of the self-immune network was constructed including activedetecting, active-warning and active-cleaning. The security architecture＇s component parts, technical characteristics and the relevant functions were discussed based on the network equipments＇ certification, the netflow analysis and the hosts＇ access certification to ensure the normal network running.

关 键 词：自免疫网络 安全防御体系 入侵检测防御系统 AAA认证系统 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]