3Ioannidis S, Keromytis A D, Bellovin S M. Implementing a distributed firewall [ C ]//Proceedings of Conference on Computer and Communication Security, Athens, Greece ,2000 : 190 - 199.
4Miltchev S, Smith J M, Prevelakis V. Decentralized access control in distributed file systems [ J ]. ACM Computing Surveys, 2008, 40(3) :1 -30.
5Burnside M,Keromytis A. Asynchronous policy evaluation and enforcement [C]//Proceedinss of the 2nd Computer Security Architecture Workshop (CSAW) ,Fairfax,VA,2ff}8:5 -X).
8IEC. IEC/TS 62443-1-1 Edition 1.0,Industrial communication networks-Network and system security-Part 1-1:Terminology,concepts and models[S].Geneva:IEC,2009.
9IEC. IEC 62443-2-1 Edition 1.0,Industrial communication networks-Network and system security-Part 2-1:Establishing an industrial automation and control system security progr am[S].Geneva:IEC,2010.doi:10.1016/j.jpedsurg.2008.08.033.
10IEC. IEC/TR 62443-3-1 Edition 1.0,Industrial communication networks-Network and system security-Part 3-1:Security technologies for industrial automation and control systems[S].Geneva:IEC,2009,(7).doi:10.1017/S0950268808001805.
