跨域访问控制与边界防御方法研究  

Research on cross-domain access control and border protection technique

作　　者：邹翔[1] 金波[1] 倪力舜[1] 

机构地区：[1]公安部第三研究所信息网络安全公安部重点实验室国家反计算机入侵与防病毒研究中心,上海200031

出　　处：《计算机应用研究》2010年第4期1481-1483,共3页Application Research of Computers

基　　金：国家"863"计划资助项目(2006AA01Z450;2008AA01Z412)

摘　　要：为保障跨域访问过程中的信息网络安全,在深入分析其所面临安全风险的基础上,提出了一种跨域访问控制与边界防御模型,该模型将跨域访问过程划分为域内和跨域两个阶段,同时结合相关安全技术进行策略决策和策略实施,保障了信息传输的保密性、完整性和可用性,从而有效地解决了跨域访问过程中的访问控制和边界防御问题。In order to protect the information and network security during cross-domain access,this paper proposed a model for cross-domain access control and border protection based on in-depth analysis of the security risk faced by it.The model divided policy enforcement and policy decision into two phases：intra-domain and cross-domain,and applied various security techniques in addition.Also protected the confidentiality,integrity and availability during information transmission process effectively.As a result,solved the access control and border protection problems of cross-domain access process effectively.

关 键 词：访问控制 安全域 边界防御 身份认证 安全策略 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]