基于监视器系统的内部网络安全策略

为了解决内网信息泄露问题,提出了一种新的内网安全策略。该策略有两个特点:一是采用层次化的手段对信息进行分级,二是引入了监控器这个部件,监控器对内网各网络部件之间的通信过程实行控制,动态地隔离涉密的主机。新的安全策略在保障信息安全的前提下,有效地提高了资源使用效率。基于该策略设计了一种基于IntelIXP2400芯片的监视器系统。实验结果表明,凭借IXP2400芯片的强大处理能力,该监检测系统可以高效地处理Gb/s速率的网络数据流。

Intranet security strategy based on a monitor system

To solve the problem of Intranet information leakage, this paper proposed a new Intranet security strategy. There are two characteristics in this strategy. In the first place, information is classified by hierarchical means. In the second place, a component called monitor is introduced. With exerting access control over the communication among the entities in the network, the monitor can dynamically isolate the physical connections among host computers involved in security. This new strategy not only ensures information security, but also improves resource utility efficiently. In addition, according to this strategy, a monitor system is also designed based on the Intel IXP2400 chip. Experimental results show that, by virtue of the powerful processing ability of IXP2400, the monitor system could efficiently process high-speed data stream in Gb/s-net.