网络信息系统的生存性技术研究  

Research on the Survivability of Network information System

作　　者：柴争义[1] 张浩军[1] 

机构地区：[1]河南工业大学信息科学与工程学院

出　　处：《微型电脑应用》2006年第11期9-10,64,共3页Microcomputer Applications

基　　金：河南省科技攻关基金资助项目(编号0524220046)

摘　　要：网络生存性技术是指在遭受攻击、故障或意外事故时,系统能够及时地完成其关键任务的能力,是目前网络安全研究的新方向。它比传统的信息保护技术、信息保障技术更能满足目前网络应用的现状,突破了传统的网络安全的概念,从新的角度对网络安全问题进行研究。本文首先分析了可生存性与传统网络安全技术的差别,并给出了生存性的基本定义、特征属性、测定标准、实现方法等,然后介绍了可生存系统设计的两种设计方法,并对两种设计方法进行了对比分析。Network survivability refers to that the system can still fulfill its key tasks when it is suffering attacks, failures or accidents. Survivability has become a new aspect in network security. It can better satisfy the current situation of network application in contrast to the traditional security concepts and technologies such as information protection and assurance. It also gives a new way to research the network security. Firstly, an analysis of the difference between survivability and traditional security concepts is made. Then,the paper gives out the definition, measurement and characteristic implementationtechnology of survivability. Finally, it introduces two methods to realize the survivability and analyzes the difference between the two methods.

关 键 词：网络安全 生存性技术 入侵使用情景 入侵容忍 可生存性设计 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]