网络安全与代理技术

Network Security and the Proxy

Ｉｎｔｅｒｎｅｔ的 ＴＣＰ／ＩＰ协议缺乏有效的安全机制，极易受到各种攻击。中心分别基于公钥基础设施 ＰＫＩ（ＰｕｂｌｉｃＫｅｙ Ｉｎｆｒａｓｔｒｕｃｔｕｒｅ）和Ｋｅｒｂｅｒｏｓ协议为园区网环境设计并开发了两个安全系统平台，该文主要描述这两平台的安全代理，文章将说明使用代理机制可以灵活且透明地实现网络应用的安全化。文章最后还讨论了ＷＷＷ的安全方案。

The Internet is vulnerable to be attacked,and lacks effective security mechanisms below the application layer.We have developed two security system platforms based on PKI (Public Key InfrastrUcture)and Kerberos Protocol for the campus network environment.This paper presents the proxy components of the two systems.It shows that the proxy can be used to implement secure applications flexibly and transparently.Also the security approaches for WWW are discussed.