一种基于分布式共识的多域安全策略智能生成机制研究  

An Intelligent Generation Mechanism for Multi-domain Security Strategy policies based on Distributed Consensus

作　　者：万抒[1] 余兴华[1] 吴中军 WAN Shu;YU Xing-hua;Wu Zhong-jun(No.30 Institute of CETC,Chengdu Sichuan 610041,China)

机构地区：[1]中国电子科技集团公司第三十研究所,四川成都610041

出　　处：《通信技术》2020年第9期2264-2270,共7页Communications Technology

摘　　要：全面、准确、及时的安全策略是保障系统安全可靠运行的关键性要素,针对地域分散、动态组网、多域协同的大型分布式系统,如何正确、高效、智能配置体系性安全策略是智能安全领域的一个难点问题。针对多域协同系统的应用模式,以统一的资产标识为前提,提出域内资产智能发现机制和域间资产智能发布机制,确保各域资产信息快速达成共识,以此为基础提出安全策略智能转换和增量翻译机制实现多域安全策略的智能、并行生成。The comprehensive,accurate and timely security strategy is the key element to ensuring the safe and reliable operation of the system.How to correctly,efficiently and intelligently configure system security policies for large-scale distributed system with the geographically dispersed,dynamic networking and multi-domain collaboration features is a difficult problem in the field of intelligent security.Aiming at the application model of the multi-domain collaborative system,based on a unified asset identification,a mechanism for intelligent discovery of assets within a domain and intelligent release of assets between domains is proposed to ensure that asset information in each domain reaches a consensus quickly.Then based on this,the intelligent conversion and increment translation mechanism of security policies are proposed to realize intelligent and parallel generation of multi-domain security policies.

关 键 词：分布式共识 安全策略 资产发现 智能生成 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]