與傳統(tǒng)網(wǎng)絡(luò)相比，主動(dòng)網(wǎng)絡(luò)作為一種新型的中間節(jié)點(diǎn)可編程網(wǎng)絡(luò)體系結(jié)構(gòu)，具有很
大的靈活性和開(kāi)放性，但同時(shí)這些特點(diǎn)也使主動(dòng)網(wǎng)絡(luò)的安全問(wèn)題變得更加突出。本文從主動(dòng)節(jié)點(diǎn)的角度進(jìn)行安全性分析，提出了一系列安全防范措施，并在此基礎(chǔ)上設(shè)計(jì)了一種主動(dòng)網(wǎng)絡(luò)節(jié)點(diǎn)的安全體系模型。該模型采用認(rèn)證、授權(quán)、主動(dòng)權(quán)能動(dòng)態(tài)加載策略等安全措施保護(hù)主動(dòng)節(jié)點(diǎn)資源免受惡意信包的攻擊。
關(guān)鍵詞：主動(dòng)網(wǎng)絡(luò)；網(wǎng)絡(luò)安全；認(rèn)證；授權(quán)；主動(dòng)權(quán)能
Analysis and Research on Security Model of Active Network ZHANG Ling,DING Zhen-guo (XIDIAN University, Xi’an 710071, China) Abstract：Compared with the traditional network, Active network is more flexibility and opened as a new network architecture with the programmable intermediate network node, but at the same time, its security issue have become more prominent. This paper makes the security analysis from the sight of the active network node, put forward a series of security measures and build a new security model of active network node based on them. This model protects the active network node from the attack of vicious capsule with authentication, authorization and active capability loads strategy dynamically.
Key words: Active network; Network Security; Authentication; Authorization; Active Capability