基于安全日志的问责技术的研究  

Research on technology of accountability based on security log

作　　者：高翔[1] 郭新东[1] 逢晓燕 张凤兰[1] 

机构地区：[1]西北工业大学,陕西西安710129

出　　处：《现代电子技术》2014年第10期92-95,共4页Modern Electronics Technique

基　　金：国家自然科学基金项目(61003037;61173047);国家"863"基金项目(2009AA01Z110)

摘　　要：分布式系统发展至今,规模越来越大,网络中故障节点的查找更加困难。在此针对这种问题提出了一种新的基于安全日志的问责方法。通过维护一个系统安全日志以记录节点过去的行为,节点间依赖此安全日志中的记录来确定其他节点行为的正确性。通过在NS-3环境下对问责机制的模拟,得出结论:使用问责机制可以确保分布式环境下任意发生故障的节点最终能被至少一个正确的节点检测出来,并且存在至少一个正确的节点持有该节点发生故障的确凿证据。With the development of distributed systems,their scale is becoming larger and larger,but it is more difficult to find the fault nodes in network. A new accountability method based on the security log is proposed in this paper. The previous behaviors of nodes are recorded by maintaining a security log in the system,and the nodes rely on the record in this security log to determine the correctness of other nodes＆#39; behaviors. Through simulating the accountability mechanism in NS-3 environment,a conclusion is obtained in this paper. That is,the application of the accountability mechanism is able to ensure any fault node can be detected by at least one correct node in the distributed environment,and at least one correct node holds the conclusive evidence of the fault that has occurred in the node.

关 键 词：分布式系统 故障节点 安全日志 问责机制 

分 类 号：TN964-34[电子电信—信号与信息处理]