“激活安全”——信息安全网络的新策略

Active Security－ A New Security Policy for the Information Systems and Networks

随着信息系统和网络的飞速发展 ,特别是因特网和电子商务的广泛应用 ,网络安全甚或至于信息安全就成为一个主要问题。这就必须开发出一种能够自动地检测并响应新安全威胁的新安全策略。重点介绍了“激活安全”及其基础设施的新概念和主要功能 ,这种“激活安全”系统由多个分系统组成 ,其中包括入侵检测系统、易损性评估检测装置、防火墙和其他安全部件 ,这些部件能够互通有关信息 ,并对各种安全威胁作出响应。还给出了“激活安全”系统的两个应用实例。

With the very rapid growth of the information systems and networks, especially the growth of the Internet and electronic commerce , the security risks of the networks or even information are becoming major problems. It is necessary to introduce a new security policy， which can automatically detect and respond to new security threats. The focus of this article is to provide the concept and the major functions of the Active Security and its infrastructure where multiple components including intrusion detection systems, vulnerability assessment scanners, firewalls and other security devices are able to communicate and respond to changing security threats. Two applications of the Active Security system are described.