一种新的主动节点资源安全管理机制

A New Security & Safety Management Mechanism of Active Node Resources

较传统网络而言,主动网络的高复杂性引起了更加严峻的资源安全问题,特别在主动节点方面。尽管在主动网络原型系统中设计了一些安全措施,但是它们都不具通用性。这在主动网络必须和传统网络相兼容的情况下,阻碍了主动网络的发展。文中设计了主动节点资源控制核,然后深入地研究了它与传统网络安全系统的接合问题,提出了对后者的具体修改建议。

Active Networks are obviously more complex than traditional networks and raise considerable security & safety (in short, we call them S&S later) problems, especially in active node. Although some S&S technologies are designed in most active networks, all of them cannot be used as a universal way. On condition that active networks must be compatible with traditional IP networks, this situation results in baffling active networks development. Based on some concepts defined in this paper, such as negative error and positive error, this paper designs a resource controlling kernel for active node. In addition, this paper comprehensively studies the problem of tying this kernel in traditional network security system, and then, puts forth some suggestions of modifying traditional network security system in two aspects of security agent lay and security service lay in detail.