大规模网络协议层协同安全管理模型的研究

本项目旨在深入研究大型复杂网络的安全管理特性，在综合考虑大型复杂网络安全的整体性和全局性的基础上，从PDRR信息安全保障的高度抽象出一个理论上可深入研究的网络安全管理模型。此理论安全管理模型综合考虑OSI／RM七个协议子层安全的整体性、协同性，使七个协议层之间层层协同、步步防护，提高网络安全管理的整体性能；提出信息流闭环访问安全防护机制和事务提交、回滚机制，其中后者可对入侵攻击事件实现实时检测、响应、恢复，使网络在受攻击的情况下能免遭破坏。

The research on large scale network protocol layer cooperate security management model

Large scale network security management is researched in this article, and a security management model is raised based on the whole network security from PDRR: protection detection reaction restore . This security model takes the whole OSI/RM's seven protocol layers into account , putting forward the machinery of information stream closed - circle access and traction submitting rolling - back . The latter can real - time detect reaction restore at intrusions , and make network avoid being destroyed.