一种基于终端行为信誉度的网络访问管理方案及其实现.pdfVIP

总第327期 计算机与数字工程 Vol. 45 No. 1 2017年第1期 Computer • Digital Engineering 115 一种基于终端行为信誉度的 网络访问管理方案及其实现$ 张 炜 1 马朝阳2 (1 海军 702 厂 上 海 200434) (2 舟 山 监 修 室 舟 山 316000) 摘要基于信誉度模型对网络访问管理问题进行研究，通过评估用户网络行为对网络安全的影响程度控制其访问。 在给出了基于信誉度的网络访问管理方案基础上，提出了针对用户行为对网络安全的影响进行信誉度评估的方法，以及信 誉度的分级计算的依据;然后给出了基于信誉度的网络访问管理系统模型设计方案;最后针对提出的网络访问管理方案，对 模型进行了总体设计。论文提出的基于信誉度的网络访问管理方案，增加了对用户行为的管理，可使网络安全管理变得动 态、实时，网络运行更加安全、稳定。 关键词网络安全；网络访问管理；信誉度 中图分类号 TP309 DOI ：10. 3969/j. issa 1672-9722. 2017. 01. 025 Introduction and Implementation of Network Access Management Solution Based on Terminal Behavior Credibility ZHANG Wei1 MA Zhaoyang2 (1. No. 702 Factory of Navy, Shanghai 200434) (2. Zhoushan Repair Room, Zhoushan 316000) Abstract Based on the creditworthiness model, the network access management is researched in the paper. The main i­ dea is that we can control users’ access and manage users’ behavior by assessing impacts which come from users’ behavior on the network security. Firstly, the method of the network access management based on the creditworthiness is given and the process of evaluating creditworthiness is given too. Afterwards, a framework about network access management based on the creditworthiness is designed. Finally, the overall design of the model and function structure is given and the database in the model and the interface between modules are designed briefly. The proposed network access management method based on the creditworthiness can increase the management level of the users’ behavior and make the network security management more dynami