基于局域网的主动防御技术应用  

Application of Active Defense Technology Based on LAN

作　　者：李洪敏[1] 李宇明 张建平[1] 向阳[1] 韵金亮 

机构地区：[1]中国工程物理研究院总体工程研究所,四川绵阳621900 [2]总装备部安全检查办公室,北京100094 [3]中科慧创科技有限公司,成都610000

出　　处：《兵工自动化》2013年第12期20-22,共3页Ordnance Industry Automation

摘　　要：针对传统的防御技术已不能抵御来自外部有组织的未知攻击的问题,提出一种基于局域网的主动防御技术。根据主动防御的安全需求,将操作系统细分成6大系统,采用行为目的分析、实时追踪分析等抗未知攻击,建立保护局域网核心系统安全的主动防御模型,确保在统一的信息安全策略下,防护来自外部的恶意攻击,提升核心系统的抗未知攻击能力,并指出实际过程中尚存在待改进的问题。该研究为局域网的主动防御技术做了有益的论证和探索。Because the traditional defense technology cannot defend the unknown attack from outer organized groups,this paper proposes a kind of active defense technology on the LAN. According to the requirements of the active defense technology, we divide the operating system into six parts and build the active defense model which protects core system security on LAN through researches on behavior-intention analysis, real-time tracing analysis and other unknown attacks.This method can resist outer malicious attacks and promote the core system＇s ability of resisting unknown attacks in the unitized security policy. Though there are some problems of this model to be improved in real scene, this method can help further researchers to do argumentation and explore about the active defense technology on the LAN.

关 键 词：安全威胁 深度检测 深度修复 主动防御 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]