主动网安全模型的研究与分析

Analysis of and Research on Security Model of Active Network

提出一种新的主动网安全模型,在主动节点之间使用IPsec安全通信协议和Keynote信任管理系统, 同时结合主动节点的管理层对节点实施控制管理。与著名的SANE模型相比,文中提出的模型能更有效地遏制各种 攻击,更好地保障了主动网的安全。

In this paper, a new security model of Active Networks is established, in which IPsec protocol and Keynote Trust-Management system are deployed in Active Nodes. Further more, the Active Node is brought under the control of the Active Node Management Layer. Compared with the well-known SANE model, this model can hold back a wider variety of attacks and better guarantee the security of Active Networks.