基于测量的网络安全平台  

Measurement-based network security platform

作　　者：仇小锋[1] 赵洪华[1] 张国敏[1] 杨扬[1] 陈鸣[1] 

机构地区：[1]解放军理工大学指挥自动化学院,江苏南京210007

出　　处：《解放军理工大学学报（自然科学版）》2009年第2期124-128,共5页Journal of PLA University of Science and Technology(Natural Science Edition)

基　　金：国家863计划资助项目(2001AA112090);国家自然科学基金重大研究计划资助项目(90304016)

摘　　要：网络安全保障需要为用户提供一种公共的基础设施,以支持面向公众的网络安全服务。提出了基于测量的网络安全平台MbNSP(measurement-based network security platform),即以网络测量为基本手段,收集和分析计算网络实体的安全特性,为应对网络中各类已有或潜在的安全威胁提供检测、追踪和响应等基本服务支持的网络基础设施。讨论了MbNSP与网络安全产品的对比以及MbNSP的组成,阐述了MbNSP的3层体系结构,即通用安全测量层、网络安全接口层和安全服务与应用层。该平台可以为用户提供安全检测、安全追踪和安全扫描等服务。Network security protection should provide a common infrastructure for users to support publicoriented network security services. Measurement-based Network Security Platform （MbNSP）, a kind of network infrastructure to support basic services such as detection, traceback and response applying to all kinds of existing or potential security threats was proposed, in which the security characteristics of computer network entities based on network measurement were collected and analyzed. The comparison of MbNSP and network security products was provided as well as the components of MbNSP. The architecture of MbNSP was described in detail, which consisted of common security measurement layer, network security interface layer and security service ＆ application layer. It is proved that MbNSP can offer security detection service, security traceback service, security scan service and so on.

关 键 词：网络测量 网络安全 安全服务 安全平台 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]