IMS网络安全分析和策略部署

Research on Security Risk Analysis and Security Policy Deployment of IMS

为了降低和控制IMS网络安全风险,必须采取合理有效的整体安全策略。在分析IMS网络安全问题起因及安全威胁类型的基础上,总结了IMS网络存在的诸多风险,重点阐述了IMS安全体系框架和安全机制,并科学的划分IMS网络安全域,以实现强认证授权、机密性、完整性和可信性为目标,提出针对各个安全域的关键安全策略,主要从组网技术、认证鉴权、边界防护和安全隔离等方面进行设计,对IMS网络安全系统建设具有实践意义。

In order to reduce and control the security risks, some reasonable and effective entirety security policys should be adopt- ed.Based on the analysis of the reasons and threat types of IMS network security, summarize a lot of risks about IMS network are sum- merized, and the security architecture and security mechanism are emphasizedly described. And also, dividing the IMS network appli- cation system to many security zones, each sub-domain, aiming at strong certificate, confidentiality, integrity and creditability, some key security policies are proposed, mainly from the aspects of networking technology ,boundary protection,security isolation, which is of some practical value of IMS security mechanism construction.