信息系统等级保护安全域隔离技术的探讨  

Studies on the Security Domain Isolation Technology for Classified Protection of Information System

作　　者：景峰[1] 

机构地区：[1]山西省电力公司,山西太原030001

出　　处：《山西电力》2010年第5期62-64,共3页Shanxi Electric Power

摘　　要：分析了信息系统等级保护中"端到端业务访问的横向隔离"的需求,对比了目前典型的虚拟局域网、访问控制列表、虚拟专用网等网络逻辑隔离技术和网络终端接入控制技术,探讨了虚拟资源动态分配和桌面终端的一机多域的安全隔离方案,指出建设中应关注的要点。In order to meet the requirements of classified security protection,this paper analyses the needs of the end to end service between the separated security domains.The current typical network logical isolation technologies,like VLAN,ACL and VPN etc.,are compared,and network terminal access control technologies are introduced.Dynamic allocation technology of virtual resource and safety isolation plan of ＇one computer multi-domain＇ method of desktop terminals are discussed in this paper.Some key points which need to be paid attention to in the construction are proposed.

关 键 词：等级保护 安全域 动态隔离 多角色主机 

分 类 号：TP309.2[自动化与计算机技术—计算机系统结构]