基于Agent的内网安全系统研究  

The Research of an Agent-Based Internal Network Security System

作　　者：周剑岚[1] 刘先荣[2] 宋四新[2] 

机构地区：[1]华中科技大学控制科学与工程系,湖北武汉430074 [2]中国长江三峡工程开发总公司,湖北宜昌443002

出　　处：《微电子学与计算机》2008年第5期1-5,共5页Microelectronics & Computer

基　　金：国家自然科学基金项目(60174039)

摘　　要：针对目前分散式安全服务的种种弊端,通过将多Agent系统的多种特性引入网络安全系统,提出了一种基于网络拓扑结构感应能力以及行为自主性的多Agent融合方法的网络安全系统模型.以身份认证、访问控制、漏洞检测、安全审计等网络安全业务设计和实现了多种类型Agent,使网络安全系统提高了适应性能力等特征.通过自保护检测服务,确保Agent的安全通信及平台的顺利实施.该系统能有效地实施上述安全任务,提高网络安全;并能充分利用现有设备,实施廉价,可扩展性好.Aiming to the abuses of current distributed .security services, this paper applies the characteristics of multi-agent system to the network .security system, and proposes a model based on the convergent method which has the induction ability of network construction and behavior independence. The system designs and implements several kinds of agents with user authentication, network access control, vulnerability detection and secure auditing; increases the adaptability and other characteristics of network security system. Through the self-prevention detection service, the system guarantees the secure communications among the agents and the ,smooth platform deployment. The system can effectively implement above security tasks, increase the security of the internal network; thus is high efficiency, scalable and open.

关 键 词：网络安全 软件智能体 自保护检测服务 移动安全智能体 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]