基于安全基片的可重构网络安全管控机制  

Security Substrate Based Security Management and Control Mechanism of Reconfigurable Network

作　　者：陈杰[1] 刘建伟[1] 王蒙蒙[1] 何双羽 毛剑[1] 

机构地区：[1]北京航空航天大学电子信息工程学院,北京100191

出　　处：《电信科学》2014年第7期19-25,共7页Telecommunications Science

基　　金：国家重点基础研究发展计划("973"计划)基金资助项目(No.2012CB315905);国家自然科学基金资助项目(No.61272501)

摘　　要：对下一代互联网安全体系架构进行了分析探讨,重点研究了已有网络体系架构的特点及面临的安全挑战,界定了可重构网络体系的安全目标,并提出了基于安全基片的可重构网络安全管控机制。同时,给出了安全基片定义以及基于安全基片的可重构网络安全模型,并对多级安全等级的安全服务构造、基于安全基片动态构建安全服务等可重构网络安全管控的关键环节进行了深入阐述。The next generation internet security architectures were analyzed and the characteristics and security challenges of the existing network were studied. The security goals of reconfigurable network were defined, and the ＂security substrate＂ based security management and control mechanism of reconfigurable network was presented. The definition of ＂security substrate＂ was given and the corresponding reconfigurable networks security model was illustrated. The construction of security services with multilevel security structure and security service establishment process via ＂security substrate＂ were put forward, which were key components of the security management and control architecture of reconfigurable network.

关 键 词：下一代互联网设计 可重构网络 安全基片 动态安全模型 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]