一种可信任的网络安全模型

A TRUSTABLE NETWORK SECURITY MODEL

随着网络的高速发展,其数据传输的安全性成为网络研究的热点。本文从系统结构的角度出发,提出了一种可以对系统传输的数据流提供保护的可信任的网络安全模型。该模型不仅提供了一种可信任的、可扩展的分层式Internet身份认证机制(分层式公钥分配架构);而且还提供一种动态检测机制来确认对方的活性,从而避免了无效数据的传输;模型还通过在网络层与链路层之间嵌入一个安全模块来实现对数据的安全处理。实验结果表明,该模型具有很强的安全性和有效性。

With the rapid development of network, most research is focused on the security of data in the Intemet. This paper presents a novel trustable model of network security that can protect the data stream transferred in the network. In this model, we not only bring forward a trustable extensible identification strategy that is a hierarchy, but also provide a dynamically detecting method to verify the liveliness of opposite peer that can avoid the network congestion. A secure layer that implements the encapsulation the data is inserted between the network layer and the link one. The experimental results show that our model can work very well.