摘要
传统网络安全技术无法保证某些实时系统及关键性系统的持续安全。通过对基于主动响应和基于冗余两种提高系统可生存能力方法的研究分析的基础上,提出了可生存系统的分层冗余结构模型。该模型在各个层次上引进异构组件及互监视机制,既可避免基于主动响应的可生存系统检测能力和响应速度的缺陷,又能解决基于同构冗余的可生存系统无法抵抗可重复攻击的问题。实践结果表明,与传统的可生存系统模型相比,提出的分层冗余结构在系统受到恶意攻击或系统部分组建受损的情况下仍能维持一定程度的工作并持续提供服务。
Traditional network security techniques cannot ensure persistent of ability and velocity. The survivable system model is put forward based security for some real-time and critical systems for the reason on heterogeneous redundancy on the basis of comparing the active response method and the method based on redundancy. Through introducing heterogeneous components in deferent levels and the observe-on-each-other mechanism, the model solve the problem of detection ability, velocity and anti-repeatable attacks. The experimental results show that the model can maintain degraded service when under malicious intrusions.
出处
《计算机工程与设计》
CSCD
北大核心
2008年第9期2203-2205,2208,共4页
Computer Engineering and Design
关键词
网络安全
可生存性
入侵容忍
异构冗余
可生存系统
分层模型
network security
survivability
intrusion tolerance
heterogeneous redundancy
survivable system
layered model
