與傳統(tǒng)網(wǎng)絡(luò)相比，主動網(wǎng)絡(luò)作為一種新型的中間節(jié)點(diǎn)可編程網(wǎng)絡(luò)體系結(jié)構(gòu)，具有很
大的靈活性和開放性，但同時這些特點(diǎn)也使主動網(wǎng)絡(luò)的安全問題變得更加突出。本文從主動節(jié)點(diǎn)的角度進(jìn)行安全性分析，提出了一系列安全防范措施，并在此基礎(chǔ)上設(shè)計(jì)了一種主動網(wǎng)絡(luò)節(jié)點(diǎn)的安全體系模型。該模型采用認(rèn)證、授權(quán)、主動權(quán)能動態(tài)加載策略等安全措施保護(hù)主動節(jié)點(diǎn)資源免受惡意信包的攻擊。
關(guān)鍵詞：主動網(wǎng)絡(luò)；網(wǎng)絡(luò)安全；認(rèn)證；授權(quán)；主動權(quán)能
Analysis and Research on Security Model of Active Network ZHANG Ling,DING Zhen-guo (XIDIAN University, Xi’an 710071, China) Abstract：Compared with the traditional network, Active network is more flexibility and opened as a new network architecture with the programmable intermediate network node, but at the same time, its security issue have become more prominent. This paper makes the security analysis from the sight of the active network node, put forward a series of security measures and build a new security model of active network node based on them. This model protects the active network node from the attack of vicious capsule with authentication, authorization and active capability loads strategy dynamically.
Key words: Active network; Network Security; Authentication; Authorization; Active Capability