基于等级划分的可信接入和修复模型研究

Research on Trusted Access and Remediation Model Based on Grade Division

提出了一种基于等级划分的层次化可信接入框架和修复模型,详细说明了可信属性的划分规则和等级的评估方法以及修复模型的工作流程,着重阐明了基于该框架的实际应用和终端接入过程.仿真实验结果表明,框架在保证网络系统安全性和可信性的同时,能够增加终端接入网络的灵活性,并为各厂商可信网络设备的互联、互通和互操作提供支撑,而且修复模型部署简单,为不满足本地安全策略的终端提供方便可靠的修复服务.

A framework of hiberarchy trusted access and remediation model based on the grade division were put forward,and the partition rules of trusted attributes,the methods of grade division as well as the work flow of remediation model were explained in detail.Moreover, the potential applications and the access procedure of terminals were discussed.Simulations results show that by the proposed framework,not only the safety and reliability of network can be ensured,but also the flexibility of ways to access network is strengthened,and that it can provide support for interoperability of different equipment manufacturers.It also can be concluded that the remediation model is easy to deploy and by which the convenient and reliable remediation services are able to be provided to those terminals who fail to meet the security policy.