基于PPDR的动态无线网络安全模型的改进研究

为了解决PPDR模型在主动性防御、风险评估及安全策略生成等方面存在的缺陷问题,提出了基于PPDR分布式策略的可动态自调节的无线网络安全模型。在动态无线网络中,改进的网络安全模型主要是通过数据流的特征匹配,负责检测以及流量的过滤;根据安全策略对流经的数据包进行检测分析;根据日志记录增加对应的新安全策略,通过AP互动实现响应的连接、控制及交互。该改进模型很好地实现了安全策略的动态自调节,有效解决了无线网络中移动终端与外接入点之间的协调以及策略更新。仿真实验及应用表明,改进的动态无线网络安全模型可以实时更新安全策略,能够更好地适应动态性的无线网络。

The Improved Research of Dynamic Wireless Network Security Model Based on the PPDR

In order to solve the problems of active defense, risk assessment and safety strategy in the PPDR model, a wireless net-work security model based on the PPDR distributed strategy and dynamic self adjusting has been proposed. In the dynamic wireless network, the improved network security model is responsible for the detection and flow filtration through the feature match of data flow. Detection analysis of flow data packet is made according to the security strategy. The corresponding strategy is employed according to the log records. The response connection, control and interaction is achieved through the AP interaction. The improved model has achieved a very good security strategy for dynamic self-adjusting, and solved the coordination between the mobile terminal and access point. The simulation and application shows that the improved model can been updated in real time and can better adapt to the dynamic wireless network.