大型企业网ipv6多节点协同机制与安全策略-计算机系统应用.pdfVIP

计 算 机 系 统 应 用 2015 年 第 24 卷 第 4 期 大型企业网 IPv6 多节点协同机制与安全策略① 郭文刚 ( 中国电子科技集团公司 电子科学研究院, 北京 100041) 摘 要: 摘要大型企业网结构复杂庞大, 各部门之间需要协同合作, 构建一个多节点协同机制的安全策略体统可 以有效解决大型企业网的协同安全管理问题. 针对这种情况, 通过采用 C/S 结构, 引入蚁群原理, 引进入侵检测 的算法, 设计并实现了一个基于 IPv6 的多节点协同机制与安全系统框架, 并对本文设计的系统进行了一定的测 试实验, 结果表明这一系统可以很好的解决大型企业网安全问题, 实现大型企业网间的有效协同合作, 并较好的 解决了大型企业网的协同安全管理问题. 关键词: 大型企业网; IPv6; 多节点协同机制; 安全策略系统; 实现 Large Enterprises Network Security Strategy and Multi-Node Coordination Mechanism Based on IPv6 GUO Wen-Gang (China Academy of Electronics and Information Technology, China Electronic Science Technology Group Inc., Beijing 100041, China) Abstract: The network structure of large enterprises is complex. It requires cooperation between every department. Building a security policy system of multi-node cooperative mechanism can efficiently solve the problem onthe cooperative security management for large enterprises network. Based on the above background, this paper uses C/S structure, introduces the principle of ant colony and the algorithm of intrusion detection, to carry out a research on the coordination mechanism and security system of multi-node based on IPv6. The designed system in this paper is tested. The result shows it can handle the security problem of the large enterprises network well. It also implements the effective collaboration between large enterprises networks, and solves the problem on the cooperative security management of large enterprises network. Key words: large enterprise network; IPv6; multi-node cooperative mechanism; security policy system; implement IPv6 (Internet Protocol Version6)也就是下一代互 的入口是安全策略, 这在整个 IPSec 体系中发挥着十 联网协议. IPv6 技术是在 IPv4 技术的基础之上发展而 分重要的作用. IPSec 中的 SPD 所存储的主要是 I