网格安全保障研究

网格是实现信息技术从垂直集成的库房转化成水平集成的、面向服务的系统的一种重要技术.针对组成网格的结点元素的异构性和多样性,提出了一个安全的信息网格体系结构来保障网格环境下的信息安全.该体系结构有3维,第1维由服务管理器管理的应用层、可信网格基础设施、安全虚拟化以及可信资源构成,第2维由信任管理器、安全策略管理器和安全监控器组成,第3维由服务战略规划及决策、服务组织和服务运作组成.设计了信任管理器、安全策略管理器和安全监控器.仿真表明该体系结构有很好的安全性.

Study of Information Assurance For Grid

The grid is one of major technologies to transform the vertically integrated silos to horizontally integrated, service oriented systems. Because the grid nodes are heterogeneous and diverse, a 3 dimension architecture of grid information assurance system was proposed to get the information assurance of grid environment. The first dimension consisted of the application layer governed by service manager, the trusted grid infrastructure, the security virtualization, and the trusted resources; the second dimension consisted of trust manager, security policies manager and security monitor among which the policies manager was the core; the third consisted of the services strategy, the services organization, and the services operation. The trust manager, security policies manager and monitor were also designed. Computer simulation showed the proposed architecture works well.