基于动态监控器的安全局域网  

Secure Local Area Network Based on Dynamical Monitor

作　　者：程磊[1] 司天歌[1] 戴一奇[1] 

机构地区：[1]清华大学计算机科学与技术系网络所,北京100084

出　　处：《计算机工程》2008年第6期158-160,共3页Computer Engineering

基　　金：国家“863”计划基金资助项目(2005AA114160)

摘　　要：从体系结构角度,提出一种新的局域网安全解决方案。该方案采用透明计算机进行集中统一存储,用星型结构作为局域网的拓扑结构,并且在网络中心节点引入监控器。监控器拥有局域网的主动控制权,对各个网络部件之间的通信过程实施强制访问控制,以实现对终端与终端之间及终端与外网之间的通信数据的过滤和动态物理隔离。This paper proposes a new solution to the security of LAN in perspective of architecture. There are two characteristics in this solution： consolidating discrete storage devices in the LAN by means of transparence computing technology, the LAN has a star topology with a central monitor, which can proactively regulate the network traffic. With mandatory access control over the communication among the entities in the network, the monitor can filter the traffic and dynamically isolate the physical connections among host computers, and between host computers and outside network.

关 键 词：局域网安全 透明计算 可信计算机系统 计算机网络 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]