基于终端状态评估模型的网络安全机制

Network Safety Mechanism Based on Endpoint State Evaluation Model

提出了一种将CMS协议引入终端设备状态评估模型中的安全机制。介绍了IETF NEA终端状态评估模型和PA-TNC协议,分析了它们中存在的安全隐患,然后将CMS协议引入PA-TNC中作为应用层保护机制,列举了其安全性应用,最后对在终端状态评估模型中使用CMS协议的部分情况下开销作了分析,得到其对系统开销的影响。

One kind of safety mechanism based on endpoint state evaluation model which uses CMS is introduced. First a brief introduction of IETF NEA endpoint state evaluation model and PATNC is introduced and the security vulnerability is analyzed. Then CMS is joined with PATNC as application layer safety mechanism and its application is enumerated. Last the overheads of CMS under some situation is analyzed, and its infection to system overheads is gained.