一种Internet体系结构安全性的分析方法

提出一种分析Internet体系结构安全性的方法．通过引入访问关系和访问流的概念来说明，在网络安全中传统的访问控制是一种按照一定的安全策略来约减访问关系数量的过程，在此基础上提出了一种基于真实地址和匿名地址的控制数据和应用数据的网络地址数据分类方法，并在均衡网络可管理性及开放性、安全性和用户隐私性的条件下，建立了相应的全局访问控制规则．网络安全分析表明，所提方法可以对访问关系进行大量的约减，改进访问关系安全性，从整体上提高网络安全水平．

Analysis Method for Internet Architecture Security

An analysis method of Internet architecture security is presented by introducing the concept of access relations and access streams to show that the access control is a procedure to reduce access relations according to certain security policies in the traditional network access control. On the basis of the concept, a new scheme of data classification is proposed based on real and anonymous addresses and network addresses of the control and application data. A set of the corresponding global access control rules is established under the conditions of the openness and manageability of the uniform network, security and user privacy. The analysis of the scheme shows that the proposed method reduces access relations significantly, and the level of the Internet architecture security is increased wholly.