网格安全保障研究  

Study of Information Assurance For Grid

作　　者：罗霄峰[1] 罗万伯[1] 吴彦伟[1] 廖勇[1] 王文贤[1] 周安民[1] 

机构地区：[1]四川大学信息安全研究所,四川成都610064

出　　处：《四川大学学报（工程科学版）》2008年第2期116-119,共4页Journal of Sichuan University (Engineering Science Edition)

基　　金："十一.五"预研项目资助(JG0708)

摘　　要：网格是实现信息技术从垂直集成的库房转化成水平集成的、面向服务的系统的一种重要技术。针对组成网格的结点元素的异构性和多样性,提出了一个安全的信息网格体系结构来保障网格环境下的信息安全。该体系结构有3维,第1维由服务管理器管理的应用层、可信网格基础设施、安全虚拟化以及可信资源构成,第2维由信任管理器、安全策略管理器和安全监控器组成,第3维由服务战略规划及决策、服务组织和服务运作组成。设计了信任管理器、安全策略管理器和安全监控器。仿真表明该体系结构有很好的安全性。The grid is one of major technologies to transform the vertically integrated silos to horizontally integrated, service-oriented systems. Because the grid nodes are heterogeneous and diverse, a 3-dimension architecture of grid information assurance system was proposed to get the information assurance of grid environment. The first dimension consisted of the application layer governed by service manager, the trusted grid infrastructure, the security virtualization, and the trusted resources; the second dimension consisted of trust manager, security policies manager and security monitor among which the policies manager was the core; the third consisted of the services strategy, the services organization, and the services operation. The trust manager, security policies manager and monitor were also designed. Computer simulation showed the proposed architecture works well.

关 键 词：网格 网格安全 安全策略 信任管理 信息保障 

分 类 号：TP309[自动化与计算机技术—计算机系统结构] TP393.08[自动化与计算机技术—计算机科学与技术]