基于数字签名方案的口令鉴别方案

本文在广义ＥｌＧａｍａｌ型签名方案上建立了许多口令鉴别方案，并且提出了文［１］的三个改进方案。利用这些方案，计算机系统不仅能监测和控制口令的使用，而且可以抗击许多对口令的伪造攻击。     

信息高速公路上的安全问题

首先介绍了信息高速公路的概貌,并指出了信息高速公路将面临的威胁和攻击,接着说明了信息高速公路应当具备的基本安全特性以及实现这些特性可以采取的措施,最后介绍了信息高速公路安全技术的开发动态。     

IC卡在电信领域的应用模式

本文列举了ＩＣ卡在电信领域及一些国家和地区的应用之后，给出了国际ＩＣ卡的应用发展模式，以供有关部门参考。     

局域网通讯安全的实现

尽管当前有许多维护网络安全的策略，但是局域网内部通讯安全却往往被忽略，文章首先分析当前一些安全策略在维护局域网内部通讯安全的不足，然后提出一种具有加密功能的以太网网卡，用以解决局域网内部通讯的安全问题。     

我国抽水蓄能电站发展问题探讨

抽水蓄能电站在电力系统中担负着调峰填谷、调频、调相、事故备用等重要任务，是电网经济而有效的调控手段。但以电量为唯一评价指标，其动态效益不能转化为财务效益，严重影响抽水蓄能电站的财务生存能力。建议借鉴国外经验，结合中国国情，加强对这一课题的研究，以充分发挥抽水蓄能电站的作用和效益。     

A Survey of E-Commerce Security

E-commerce is a very active field of Internet research. A very important aspect of e-commerce is its security. Because of the variety of e-commerce applications, many security policies, protocols and techniques are involved in the deployment of the security. The related standards and protocols of e-commerce are studied in this paper. The general model of e-commerce security is set forth. In this model, two most important e-commerce protocols including secure sockets layer (SSL) and secure electronic transaction (SET) are analyzed. The open problems and new trends of e-commerce security are presented.     

一种适合协同工作系统的安全认证方案

针对网络化协同工作系统的安全认证需求，综合应用Kerberos协议、X．509证书和口令认证技术，借鉴PKI的思想，设计了一种适合网络化协同工作系统的灵活而易于扩展的安全认证方案。这个方案能够保证证书的安全分发，满足网络化协同工作系统对分散、动态的用户安全身份认证的要求。     

计算机网络安全体系的研究

首先,结合国内外同行的最新研究成果,我们将对网络系统中的不安全因素加以分析,并形式化地给出一个安全计算机网络系统的定义;然后将从理论上阐述一个基于OSI-RM体系的网络安全保护体系的模型,并讨论该安全保护体系在现有系统中的作用。     

Wavelet based Denial-of-Service detection

Network Denial-of-Service (DoS) attacks that disable network services by flooding them with spurious packets are on the rise. Criminals with large networks (botnets) of compromised nodes (zombies) use the threat of DoS attacks to extort legitimate companies. To fight these threats and ensure network reliability, early detection of these attacks is critical. Many methods have been developed with limited success to date. This paper presents an approach that identifies change points in the time series of network packet arrival rates. The proposed process has two stages: (i) statistical analysis that finds the rate of increase of network traffic, and (ii) wavelet analysis of the network statistics that quickly detects the sudden increases in packet arrival rates characteristic of botnet attacks.Most intrusion detections are tested using data sets from special security testing configurations, which leads to unacceptable false positive rates being found when they are used in the real world. We test our approach using data from both network simulations and a large operational network. The true and false positive detection rates are determined for both data sets, and receiver operating curves use these rates to find optimal parameters for our approach. Evaluation using operational data proves the effectiveness of our approach.     

一种异地库房管理中远程数据维护方法的研究与应用

介绍了在异地库房管理中，采用C／S结构和远程数据库访问技术等实现的对远程数据维护的一种方法。通过该方法开发的远程数据传输系统，实现了远程客户端对服务器的通信，完成了远程数据在后台服务器的集中管理和服务器对远程数据的格式、类型等的控制，同时保证了远程客户端对服务器操作的并发性，客户端数据和服务器数据的完整性、安全性以及远程客户端数据与后台服务器数据的一致性，有效地维护了远程数据。该系统已成功运用于库房管理之中。