网络系统策略完整性安全机制

Policy Integrity Security Mechanism for Network System

针对网络服务器之间共享策略的完整性安全风险,提出了一种基于固件的网络策略安全机制。该机制可安全且快速地进行共享策略的网络传输,并对共享策略进行完整性校验,进而保障共享策略的完整性安全。实验表明,该机制实现了策略的安全管理,同时提高了网络安全管理员的管理效率。

Aiming at the integrity security risk of sharing policy between network servers, a novel network security policy mechanism based on firmware is proposed. Supporting the fast and secure policy transferring and the integrity verification of the policy, this mechanism can guarantee the integrity security of the sharing policy. Experimental results indicate that this mechanism can effectively provide security management of the policy and promote the management efficiency of network security administrators.