| 网络安全组件间协同响应机制研究 |
| |
| 引用本文： | 谢丽霞,李学菲,杨宏宇.网络安全组件间协同响应机制研究[J].计算机应用,2010,30(6):1475-1479. |
| |
| 作者姓名： | 谢丽霞 李学菲 杨宏宇 |
| |
| 作者单位： | 1. 中国民航大学2. |
| |
| 基金项目： | 国家863计划项目(2006AA12A106);;国家自然科学基金资助项目(60776807);;天津市科技支撑计划重点项目(07ZCKFGX01700);;中国民航科技基金资助项目(RKXZY0814);;中央高校基本科研业务费中国民航大学专项项目(ZXH2009A006;ZXH2010D009) |
| |
| 摘 要： | 为解决由于组件间缺乏协同机制而无法充分发挥网络安全系统整体优势的问题,提出了一种基于策略的协同响应机制。基于策略驱动模型设计安全组件间的协同响应过程,通过对入侵检测消息交换格式(IDMEF)的扩展实现协同消息,采用块可扩展交换协议(BEEP)框架实现用于组件通信的入侵检测交换协议(IDXP),编程实现协同模块实施协同操作。运用该机制对网络安全组件的协同响应进行评估实验,获得各个阶段的时间开销。实验结果表明该机制能有效地实现网络安全组件的协同响应。
|
| 关 键 词： | 网络安全组件 协同响应机制 策略 IDMEF IDXP |
| 收稿时间： | 2009-12-02 |
| 修稿时间： | 2010-01-20 |
Research on collaborative response mechanism of network security components |
| |
| XIE Li-xia,LI Xue-fei,YANG Hong-yu.Research on collaborative response mechanism of network security components[J].journal of Computer Applications,2010,30(6):1475-1479. |
| |
| Authors: | XIE Li-xia LI Xue-fei YANG Hong-yu |
| |
| Affiliation: | School of Computer Science and Technology/a>;Civil Aviation University of China/a>;Tianjin 300300/a>;China |
| |
| Abstract: | To solve the problem that the network security systems cannot play overall advantages due to the lack of coordination mechanism among components,a policy-based collaborative response mechanism was proposed.The process of collaborative response was designed with the policy-driven model.The Intrusion Detection Message Exchange Format (IDMEF) was expanded to be the collaborative message format.A Blocks Extensible Exchange Protocol (BEEP)-based Intrusion Detection Exchange Protocol (IDXP) was implemented to com... |
| |
| Keywords: | network security components collaborative response mechanism policy IDXP IDMEF |
| 本文献已被 CNKI 万方数据 等数据库收录！ |
| 点击此处可从《计算机应用》浏览原始摘要信息 |
|
点击此处可从《计算机应用》下载全文 |
