主动网络安全机制研究

Research on the Security Mechanism of Active Network

主动网络的安全性包括对主动分组和主动节点的保护,对主动节点的保护是在通过认证的基础上,参考策略库对不同的分组授予不同的节点资源访问权限来实现。主动分组在传输过程中的代码的可靠性和完整性可以通过加密和数字签名加以保证,而在主动节点上的安全性主要通过节点和分组的双向认证及接口的严格定义,分组间的隔离及对分组的必要限制等来实现。

Compared with the traditional network, the security of Active Network includes both the active packet and active node. In order to protect the active node, the principal need showld be authenticated first, then it can be given different access rights for different packets based on policy database. Encryption and digital signatures can insure the reliability and integrity of active code in the process of transmission. And the security of packet in the node can be realized by using the authorization of both node and packet and the precision definitions of interface, the separation of packets and the restrictions for packets,etc.