基于园区网络的主动安全模型设计与研究

Design and Research of the Active Security Models of Network Based on the Campus Network

从现行典型园区网络安全设计方案入手,结合其在安全防范解决方案上存在的问题,提出了一种网络主动安全模型;在全局网络安全认识的基础上,阐述了模型组成部件的功能定义和网络主动安全实现流程;采用统一网络入口认证、网络知识发现及资源有效控制、沟通等手段,解决了现行网络安全设计中存在的恶意攻击行为源头定位困难,以及信息安全司法取证不准、网络资源安全被动防护、网络灾难快速反映能力差等问题.实验结果表明,该设计方案具有较好的可行性和实用性.

The article aims at the project of nowadays typical Campus network security,analyses the leak in the passive security defense. So it puts forward the model of the active security of network project and the description of realization flow of the active security of network.It also clarifies that based on the whole network security, the project use the unified network entrance authentication, network knowledge discovery ,resource control/ communication,etc. It can solve the hostile attack source existing in the current network security design and orient the difficulty, The safe administration of justice of the information collects evidence inaccuratly, the passive defense of network resource security, the bad reaction ability of the network catastrophe, the question like that.The experimental result indicates , this plan of design has better feasibility and practicability.