摘要
针对网络环境愈发复杂、现有网络安全传输平台边界安全防护力薄弱、平台接口功能存在缺陷和重复开发部署、效率低下等问题,采用Golang语言、Socket加密传输方式及身份认证技术开发了网络安全传输平台通用代理服务,该代理服务具有穿越网络安全传输平台的正反向透明代理、内/外网的网络安全防护身份认证、访问控制、行为检测和安全管理等功能。作为铁路互联网和移动App项目中的传输桥梁,网络安全传输平台通用代理服务已在多个系统中应用,应用效果良好。
In view of the increasingly complex network environment,the weak border security protection of the existing network security transmission platform,the defects of the platform interface function and the low efficiency of repeated development and deployment,this paper used Golang language,Socket encrypted transmission mode and identity authentication technology to develop a general proxy service for the network security transmission platform.The proxy service has the functions of forward and reverse transparent proxy passing through the network security transmission platform,identity authentication for internal/external network security protection,access control,behavior detection and security management.As a transmission bridge in the railway Internet and mobile App projects,the proxy service has been applied in many systems and achieved good results.
作者
王智敏
汉瑞洁
WANG Zhimin;HAN Ruijie(Institute of Information Technology,China Railway Lanzhou Group Co.Ltd.,Lanzhou 730000,China)
出处
《铁路计算机应用》
2022年第10期68-72,共5页
Railway Computer Application
基金
中国铁路兰州局集团有限公司2022年第二批科技发展项目计划(2022074-2)。
关键词
安全平台
代理服务
身份认证
行为检测
非对称加密
security platform
proxy service
identity authentication
behavior detection
asymmetric encryption
