摘要
提出了一种基于等级划分的层次化可信接入框架和修复模型,详细说明了可信属性的划分规则和等级的评估方法以及修复模型的工作流程,着重阐明了基于该框架的实际应用和终端接入过程.仿真实验结果表明,框架在保证网络系统安全性和可信性的同时,能够增加终端接入网络的灵活性,并为各厂商可信网络设备的互联、互通和互操作提供支撑,而且修复模型部署简单,为不满足本地安全策略的终端提供方便可靠的修复服务.
A framework of hiberarchy trusted access and remediation model based on the grade division were put forward,and the partition rules of trusted attributes,the methods of grade division as well as the work flow of remediation model were explained in detail.Moreover, the potential applications and the access procedure of terminals were discussed.Simulations results show that by the proposed framework,not only the safety and reliability of network can be ensured,but also the flexibility of ways to access network is strengthened,and that it can provide support for interoperability of different equipment manufacturers.It also can be concluded that the remediation model is easy to deploy and by which the convenient and reliable remediation services are able to be provided to those terminals who fail to meet the security policy.
出处
《数学的实践与认识》
CSCD
北大核心
2010年第17期84-99,共16页
Mathematics in Practice and Theory
基金
国家自然科学基金(60973136
61073164)
科技部国际科技合作交流专项项目(2008DFA12140)
欧盟合作项目(I55776-EM-1-2009-1-IT-ERAMUNDUS-ECW-LI2)
关键词
可信网络
接入控制
认证
可信属性
修复网络
trusted network
access control
authentication
trusted attribute
remediation network