基于可编程技术的一体化内生安全架构设计  

Design of the Integrated Endogenous Security Architecture Based on Programmable Technologies

作　　者：贾慧燕 陈振杰 王宝宝 王立昆 JIA Huiyan;CHEN Zhenjie;WANG Baobao;WANG Likun(Shijiazhuang Military Representative Office of the Military Representative Bureau of the Equipment Department of Aerospace Systems Center,Shijiazhuang 050081,China;Shijiazhuang METDA Electronic Technology Corporation,Shijiazhuang 050050,China)

机构地区：[1]航天系统部装备部军事代表局驻石家庄军事代表室,河北石家庄050081 [2]石家庄麦特达电子科技有限公司,河北石家庄050050

出　　处：《计算机与网络》2022年第22期59-62,共4页Computer & Network

摘　　要：随着数字化时代的发展,业务结构与业务需求的快速变化对网络安全性的要求越来越高,现有的安全防护体系以外挂、被动的纵深防御体系为主,难以支持网络和安全运维的智能化和自动化需求。分析了国内外内生安全的技术理念,结合新技术,新理念,创新地提出了基于可编程技术的一体化内生安全架构,利用SDN/P4的可编程优势构建内生的网络安全环境,达到协同联动的内生安全的效能,提升体系化防御能力。With the development of the digital age,the rapid change of business structures and demands requires more and more for network security.The plug-in and passive defense in depth system is the main security protection system,but it can not meet intelligentized and automated needs of network and security operations.Domestic and international technical ideas of endogenous security is analyzed,and combined with new technologies and new concepts,the integrated endogenous security architecture based on programmable technologies is proposed.By using SDN/P4's programmable advantages to build up an endogenous network security environment,the synergistic efficiency of endogenous security is achieved,and the systematized defense capability is also improved.

关 键 词：纵深防御 内生安全 可编程 

分 类 号：TP[自动化与计算机技术]