| 可生存系统的分层冗余结构与实现 |
| |
| 引用本文： | 蒋卫华,杜君,邹永彦. 可生存系统的分层冗余结构与实现[J]. 计算机工程与设计, 2008, 29(9): 2203-2206 |
| |
| 作者姓名： | 蒋卫华 杜君 邹永彦 |
| |
| 作者单位： | 中国民用航空总局,航空安全技术中心信息室,北京,100028;西北工业大学计算机学院,陕西,西安,710072 |
| |
| 摘 要： | 传统网络安全技术无法保证某些实时系统及统可生存能力方法的研究分析的基础上,提出了可生存系统的分层冗余结构模型.该模型在各个层次上引进异构组件及互监视机制,既可避免基于主动响应的可生存系统检测能力和响应速度的缺陷,又能解决基于同构冗余的可生存系统无法抵抗可重复攻击的问题.实践结果表明,与传统的可生存系统模型相比,提出的分层冗余结构在系统受到恶意攻击或系统部分组建受损的情况下仍能维持一定程度的工作并持续提供服务.
|
| 关 键 词： | 网络安全 可生存性 入侵容忍 异构冗余 可生存系统 分层模型 |
| 文章编号： | 1000-7024(2008)09-2203-03 |
| 修稿时间： | 2007-05-28 |
Survivable system based on heterogeneous redundancy |
| |
| JIANG Wei-hua,DU Jun,ZOU Yong-yan. Survivable system based on heterogeneous redundancy[J]. Computer Engineering and Design, 2008, 29(9): 2203-2206 |
| |
| Authors: | JIANG Wei-hua DU Jun ZOU Yong-yan |
| |
| Affiliation: | JIANG Wei-hua1,DU Jun2,ZOU Yong-yan1(1.Information Division,Center of Aviation Safety Technology CAAC,Beijing 100028,China,2.College of Computer,Northwestern Polytechnical University,Xi'an 710072,China) |
| |
| Abstract: | Traditional network security techniques cannot ensure persistent security for some real-time and critical systems for the reason of ability and velocity.The survivable system model is put forward based on heterogeneous redundancy on the basis of comparing the active response method and the method based on redundancy.Through introducing heterogeneous components in deferent levels and the observe-on-each-other mechanism,the model solve the problem of detection ability,velocity and anti-repeatable attacks.The ... |
| |
| Keywords: | network security survivability intrusion tolerance heterogeneous redundancy survivable system layered model |
| 本文献已被 CNKI 维普 万方数据 等数据库收录！ |
|
