CIMS网络安全体系结构研究

该文提出了一种ＣＩＭＳ网络安全体系结构及设置“安全子层”的设计思想,介绍了基于该安全体系结构的５个层次的安全保障,用户安全,应用安全,端－端安全,子网安全和链路安全。限于安全防护的开销,实用的ＣＩＭＳ网络系统根据安全需求,可选择其中某些层次的若干安全服务选项,已经在实验网络上实现了有关的安全机制,提供了相应的安全服务。

Research of the Security Architecture of CIMS Network

A security architecture of CIMS network and a design idea of "security sublayer" are proposed in this paper. Five layer security protections based on the security architecture are introduced: user security, application security, end-end security, subnetwork security and link security. For overhead of security fences, some security services oPtions of a few layers may be optimized based on security requirements in practical CIMS network system. Some security mechanisms have been implemented and relative security services have been provided in an experimental network.