未来互联网网际层安全管控架构研究  

Research on Security Management and Control Framework for Future Internet Network Layer

作　　者：邱修峰[1,2] 刘建伟 王敏[2] 章银娥[2] 

机构地区：[1]北京航空航天大学电子信息工程学院,北京100191 [2]赣南师范大学数计学院,江西赣州3410001

出　　处：《网络空间安全》2017年第10期35-40,共6页Cyberspace Security

摘　　要：传统互联网体系结构初始设计未考虑内置安全性能,导致当前互联网安全问题难以从根本上解决,因此内置安全性成为未来互联网体系结构基本目标之一。论文为未来互联网的核心层即网际层设计了一种安全管控架构,架构由管理面、控制面和数据面三个层级的安全功能组合构成。分析表明,该架构可为未来互联网提供内置多级别多粒度安全性。The initial design of traditional internet architecture did not consider its security performance, which leads to current internet security problems hard to be solved fundamentally. Therefore, built-in security becomes one of primary design objects for future internet architecture. This paper proposes a security management and control framework for the core layer of future internet, which is composed of security functions from management plane, control plane and data plane. Performance analysis shows that the framework can provide built-in multi-level multi-granularity security for future Internet.

关 键 词：未来互联网 安全管控架构 多级别多粒度安全实体 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]