基于终端行为的可信网络连接控制方案  

Trusted network connect control based on terminal behavior

作　　者：刘巍伟[1] 韩臻[2] 沈昌祥[3] 

机构地区：[1]中国人民保险集团股份有限公司,北京100080 [2]北京交通大学计算机与信息技术学院,北京100044 [3]北京工业大学计算机学院,北京100022

出　　处：《通信学报》2009年第11期127-134,共8页Journal on Communications

基　　金：国家重点基础研究发展计划("973"计划)基金资助项目(2007CB311100);国家高技术研究发展计划("863"计划)基金资助项目(2007AA01Z410;2007AA01Z177)~~

摘　　要：在可信网络连接(TNC)框架下,结合完整性度量方式,通过对终端活动进程的行为属性实时分析并计算终端的"健康度",进而提出实施网络连接控制的方案。与已有的基于终端静态特征的控制方法相比,该方案在识别和隔离潜在安全威胁方面更有效。实验结果表明利用该方案能够实时地将感染恶意代码的终端阻断在网络之外。Under the framework of TNC, a new method was proposed to calculate the ＂healthy status＂ of a terminal based on analyzing the real-time characteristics of its behavior and process activity. Compared with the existing method, which based on static characteristics, the strategy could get a better performance, especially, on identifying and isolating the terminals with potential risk. The experimental result also shows that the proposed algorithm has the capability of finding and isolating terminals which are infected by malicious codes.

关 键 词：可信计算 行为特征 动态度量 可信网络连接 

分 类 号：TP309.2[自动化与计算机技术—计算机系统结构]