摘要
随着网络入侵技术的发展,单独的防火墙、入侵检测系统等安全技术很难对付层出不穷的安全攻击。文中讨论的是基于网络节点的安全代理模型,它使用高度模块化技术,把各种安全技术作为一个个单独的功能模块来对待。根据安全策略服务器要求,安全代理动态加载和配置安全模块,故网络更加安全,也使得网络管理更加智能化、自动化。同时,该模型也支持第三方软件,故具有可扩展性和通用性。
With the development of network intrusion technology, singular and isolated security technologies like Intemet firewalls or intrusion detection systems can no longer secure networks. Aiming at the problem, develop such a security model based on network end- point which follows a highly modular approach that look upon such intrusion technologies as function modules. Security agent loads and configures these function modules based on dynamic security policy of security server. It makes our network more secure and easier to be managed. Meanwhile, this model supports third party software, which makes it more universal and extended,
出处
《计算机技术与发展》
2006年第9期201-203,207,共4页
Computer Technology and Development
关键词
安全代理
网络节点
入侵检测
security agent
network end - point
intrusion detection
