基于XML的网络管理代理安全机制的研究

Research on the Security Mechanism of XML-based Agent for Network Management

本文对基于XML的下一代网络管理中的代理进行了研究,给出了XML代理的框架,并且在此基础上提出了一套代理安全的解决方案。此方案主要从Web服务器的安全,XML报文格式的安全,安全控制策略这三个方面进行考虑,并综合了XML的特点及USM、VACM在网络管理中安全方面的优势。最后对基于XML代理和SNMP代理的性能进行了量化比较,得出了各自的缺点和优势。

Based on the analysis of XML,based network management technology of next generation,this paper provides a possible architecture for XML,based Agent,especially presents a mechanism for the security of the Agent.Three aspects,including the security of the Web Server,the security of XML message and the policy of the security control,as well as the feature of the XML and the technology of USM and VACM,are taken into consideration when designing the mechanism.Comparing the performance of XML,based agent and SNMP agent,advantages of each approach are analyzed.