基于安全基片的可重构网络安全管控机制

Security Substrate Based Security Management and Control Mechanism of Reconfigurable Network

对下一代互联网安全体系架构进行了分析探讨,重点研究了已有网络体系架构的特点及面临的安全挑战,界定了可重构网络体系的安全目标,并提出了基于安全基片的可重构网络安全管控机制。同时,给出了安全基片定义以及基于安全基片的可重构网络安全模型,并对多级安全等级的安全服务构造、基于安全基片动态构建安全服务等可重构网络安全管控的关键环节进行了深入阐述。

The next generation internet security architectures were analyzed and the characteristics and security challenges of the existing network were studied. The security goals of reconfigurable network were defined, and the ＂security substrate＂ based security management and control mechanism of reconfigurable network was presented. The definition of ＂security substrate＂ was given and the corresponding reconfigurable networks security model was illustrated. The construction of security services with multilevel security structure and security service establishment process via ＂security substrate＂ were put forward, which were key components of the security management and control architecture of reconfigurable network.