| 用于安全局域网络的动态监控器 |
| |
| 引用本文： | 周麒麟,司天歌,戴一奇. 用于安全局域网络的动态监控器[J]. 清华大学学报(自然科学版), 2009, 49(1): 123-126 |
| |
| 作者姓名： | 周麒麟 司天歌 戴一奇 |
| |
| 作者单位： | 清华大学计算机科学与技术系,北京,100084;清华大学计算机科学与技术系,北京,100084;清华大学计算机科学与技术系,北京,100084 |
| |
| 基金项目： | 国家自然科学基金资助项目(60673065);;江苏省网络与信息安全重点实验室项目(BM2003201) |
| |
| 摘 要： | 提出了一种新的局域网安全解决方案——安全局域网。动态监控器是安全局域网中的核心部件。动态监控器对终端的文件访问操作以及局域网中各个实体间的通信行为进行监视,并对这些行为加以不可向上读和不可向下写的强制访问控制规则,防止了秘密信息的非法访问以及通过网络进行的信息泄露。结果表明:该方案可以有效地解决局域网的安全问题。
|
| 关 键 词： | 安全局域网 文件访问控制 通信行为控制 强制访问控制规则 |
Dynamic communication monitors in secure local area networks |
| |
| ZHOU Qilin,SI Tiange,DAI Yiqi. Dynamic communication monitors in secure local area networks[J]. Journal of Tsinghua University(Science and Technology), 2009, 49(1): 123-126 |
| |
| Authors: | ZHOU Qilin SI Tiange DAI Yiqi |
| |
| Affiliation: | Department of Computer Science and Technology;Tsinghua University;Beijing 100084;China |
| |
| Abstract: | A secure local area network(LAN)was developed based on a dynamic communication monitor to protect illegal visits and prevent information leakages with the LAN keeping in a safe state.The results show that the dynamic communication monitor effectively solves the LAN security problem by monitoring the file access operations from the terminals as well as the LAN communication behavior,and by controlling these activities with no read up and no write down mandatory access control rules. |
| |
| Keywords: | |
| 本文献已被 CNKI 万方数据 等数据库收录！ |
