基于状态的网络行为可信性评估

The Assessment of Credibility of Network Behavior based on State

目前,网络的不可信给网络的安全提出了新的挑战,针对网络传输本身的可信问题,通过研究网络交换机的功能原理与配置选项,分析网络交换机的特性及其行为状态,提出了适合由交换机组成的网络的可信评估框架,同时也对反映网络功能的状态给予描述,在此基础上分析出网络状态与配置行为间的关系,进而评估网络配置行为的可信性。它将可信网络的内容从可信接入扩展到可信网络的设备上,以保证网络设备自身运行可信性需求。

At present, the untrusted network to has brought new challenges for the security of the network, aiming at credibility problem for network transmission itself, the paper researches the function principle and configuration options of network switch, and analyzes the characteristics and behavior of network switches, to propose a credible assessment framework consisting of a network of switches, at the same time the paper also describe the state reflecting the network function , based on the above, analyze the relation between the network state and the behavior of network configuration , further evaluate the credibility of the behavior of network configuration. It will expand the content of trusted network from trusted access to trusted network equipment,in order to ensure the dependability requirement of network equipment.