一种改进的内网安全防护策略  

An Improved Strategy for Intranet Security

作　　者：庞雄昌[1] 王喆[1] 

机构地区：[1]西安通信学院,陕西西安710106

出　　处：《计算机安全》2011年第12期9-12,共4页Network & Computer Security

摘　　要：针对目前内网安全防护策略疏于监控的问题,提出了一种改进的内网安全防护策略。改进后的安全防护策略采用指纹对用户身份的合法性进行认证,对内网用户终端的安全防护策略进行验证,对终端非法外联进行管控,划分了内网可信主机边界、内网可信用户边界、服务器可信使用者边界,有效地增强了内网安全,抵御了网络攻击。In order to solve the problem that intranet security strategy is always ignored by most users,an improved strategy for intranet security is proposed in this paper.In the new strategy we take fingerprint as user＇s identify authentication,verify the policies running on user＇s computers,manage and control the illegal external link,meanwhile,a clear boundary between trusted hosts,trusted users and trusted services is divided.The new strategy can improve intranet security and resist the network attack effectively.

关 键 词：内网安全 网络安全防护策略 可信用户 可信终端 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]