工业以太网的免疫检测系统研究  

Study on System of Immunological Detection in Industry Ethernet

作　　者：刘教民[1] 李勇征[1] 李艳[2] 孟军英[1] 

机构地区：[1]燕山大学信息科学与工程学院,河北秦皇岛066004 [2]军械工程学院,河北石家庄050003

出　　处：《计算机安全》2011年第10期31-35,共5页Network & Computer Security

基　　金：河北省自然科学基金资助项目"具有免疫功能的计算机安全系统的研究"(F2008000115)

摘　　要：随着工业以太网的广泛应用,其安全问题也越发重要,采用常用的防火墙技术和交换机技术虽然可以限定一部分异常数据,但对异常数据的类别无法判定,是一种被动的安全措施。将生物免疫机制应用到工业以太网的安全防范体系中,并结合动态防火墙技术,在工业以太网上搭建了一个相互合作的三层防御体系,嗅探层、动态防火墙层和免疫层构建的安全系统在考虑工业以太网性能的基础上,最大限度地主动发现异常、消灭异常。对安全系统进行了性能测试和完备性测试,表明该系统适用于工业以太网的安全防御。With the abroad application of the industry Ethernet,its safety is more important.The technology of firewall and switch can restrict some abnormal data,but the sort of data can not be determinate and this technology is passive.The mechanism of biological immunity is applied in the safe system of industry Ethernet,and combined with the technology of dynamic firewall,a three layers recovery system witch can cooperate with each other is established.The safe system is composed by the sniff layer,dynamic firewall layer and immunity layer.It can found abnormal data initiatively and perish them based on the requirement of the capability of industry Ethernet.The capability and maturity of safe system are tested in the end,and the results make know that it＇s suitable for the industry Ethernet＇s safe recovery.

关 键 词：工业以太网 生物免疫 嗅探 动态防火墙 入侵检测 

分 类 号：TP393.11[自动化与计算机技术—计算机应用技术]