主动网络节点操作系统中安全管理的设计

Design of Security Management in Active Network Node Operating System

讨论了主动节点的安全问题及采用基于授权的方法解决这些问题的思路,介绍了节点操作系统(NodeOS)中安全管理子系统的设计与实现方法,即利用策略管理、信任状管理及包有效性检查实现对主体的授权管理和对节点的访问控制。

This paper discusses the security problems with which active nodes are confronted, and analyzes the train of thought to solve them using authorization-based techniques. It gives the design and implementation of a security management subsystem in an active node operating system prototype, wherein authorization and access control are realized through effective policy management, credential management and validity checking of active packets.