可重构安全承载网络构建与重构算法研究

现有互联网安全体系结构僵化且效率低下。基于“以可变的有限节点资源支持多样安全应用需求、以内置的安全结构提供多级安全保障”这一认识，避免单一追求高安全等级或高服务质量的简单模式，提供更高的灵活性和可扩展性，提出一种基于重构的安全业务一服务一构件模型，并在此基础上给出可重构网络安全体系的初步构想和具有多级安全保障的可重构安全承载网络结构，给出了可重构安全承载网络构建及重构算法。仿真结果验证了算法的有效性和性能。...

Full description

Saved in:
Bibliographic Details
Published in计算机应用研究 Vol. 31; no. 4; pp. 1167 - 1171
Main Author 邢池强 胡宇翔 兰巨龙 王文钊
Format Journal Article
LanguageChinese
Published National Digital Switching System Engineering & Technological R&D Center，Zhengzhou 450002，Chin 2014
Subjects
可重构网络
多级安全
安全构件
安全组合
构建与重构
reconfigurable network
construction and reconfiguration
可重构网络
构建与重构
security composition
security components
多级安全
安全构件
multi-level security
安全组合
Online AccessGet full text
ISSN1001-3695
DOI10.3969/j.issn.1001-3695.2014.04.051

Cover

More Information
Summary:现有互联网安全体系结构僵化且效率低下。基于“以可变的有限节点资源支持多样安全应用需求、以内置的安全结构提供多级安全保障”这一认识，避免单一追求高安全等级或高服务质量的简单模式，提供更高的灵活性和可扩展性，提出一种基于重构的安全业务一服务一构件模型，并在此基础上给出可重构网络安全体系的初步构想和具有多级安全保障的可重构安全承载网络结构，给出了可重构安全承载网络构建及重构算法。仿真结果验证了算法的有效性和性能。
Bibliography:51-1196/TP
Current Internet security architecture is fixed and exhibits low efficiency. Based on the thinking of ＂supporting di- verse security applications with the variable limited node resources and providing multilevel security guarantee by inherent se- curity architecture＂, avoiding limitations of traditional model aiming at pursuing high security quality of service and ensuring security by providing more flexibility and scalability, this paper first presented a network reconfiguration-oriented security busi- ness-services-components model, and gave a preliminary conception of reconfigurable network security architecture as well. Then this paper proposed a novel security structure which was named reconfigurable security carrying network （ RSCN for short） to provide muhilevel security guarantee. At last, it gave the construction algorithm and reconstruction algorithm of RSCN. The simulation results show that the algorithms are effective.
reconfigurable network ; security composition; multi-level security ;
ISSN:1001-3695
DOI:10.3969/j.issn.1001-3695.2014.04.051