基于成员角色划分的威胁分析及预防  

Threats Analysis and Prevention Base on Partition of Member Role

作　　者：倪建成[1] 李志蜀[1] 高仲合[2] 孙继荣[1] 周利平[1] 

机构地区：[1]四川大学计算机学院,四川省成都市610065 [2]曲阜师范大学计算机科学学院,山东省日照市276826

出　　处：《曲阜师范大学学报（自然科学版）》2007年第3期30-34,共5页Journal of Qufu Normal University(Natural Science)

基　　金：国家自然科学基金(60072014);山东省自然基金(Y2003G01);四川省科技厅重点项目(05GG021-003-2)

摘　　要：在集成Web服务的网格计算环境中,为提高安全等级及预防威胁,基于用户任务计算过程中的参与者角色划分,提出了一种新的威胁分类方法和相应的威胁模型.在面向服务的架构中,构建了协同利用基本的安全服务和工具提供多层次防御威胁的安全模型.威胁分析既可作为正确设计安全服务的基础,又可进一步用于正确操作过程的开发.In order to enhance the security level and prevent the threats in Grid interacting with Web service environment, based on discriminating participant actors during the procedure of computation, a new threat classification method is proposed before corresponding threats model being introduced. Furthermore, how basic security services and tools should interact with each other to provide an attack-resilient multilayer protection methodology in a service-oriented architecture are illustrated. Consequently, such threats analysis can be further utilized as the basis of proper security services design and operational procedures development.

关 键 词：网格安全 WEB服务 威胁分类 预防 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]