安全的基于网络的计算机系统  

Trusted computer systems in network environment

作　　者：司天歌[1] 刘铎[1] 戴一奇[1] 

机构地区：[1]清华大学计算机科学与技术系,北京100084

出　　处：《清华大学学报（自然科学版）》2007年第7期1220-1223,共4页Journal of Tsinghua University(Science and Technology)

基　　金：国家"八六三"高技术项目(2005AA114160)

摘　　要：为了解决日益严重的局域网的安全问题,提出一种安全的基于网络的计算机系统模型。该模型以透明计算机系统为基础,利用透明计算技术对计算机内部的安全问题进行控制。针对网络内主机间的安全问题,采用星型拓扑结构,在网络的中心位置引入监控器设备,监控系统中各个部件之间的通信过程,以实现对主机与服务器之间、主机之间及主机与外网之间的通信数据过滤和动态物理隔离,提高了系统的安全性。理论分析表明:该系统可有效地解决网络安全问题,从而为局域网提供了可靠的安全保证。To deal with worsening network security problems, a trusted computer system model for network applications was developed based on the transparence computing paradigm. The model effectively controls security problems within the computer by using transparence computing technology. Problems among computers inside a network can be controlled by using a star topology with the monitor in the center of the model which watches and controls communications among the system entities. The monitor can filter data transfers and dynamically isolate physical connections among host computers, between host computers and servers, as well as between host computers and the outside network. Analyses show that this model effectively solves network security problems and guarantees local area network safety.

关 键 词：计算机网络安全 计算机体系结构 透明计算 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]