摘要
基于防御-检测-响应-恢复的代理服务器安全模型由防御、检测系统、响应系统、恢复系统和专家系统组成。防御系统接收数据并进行检测,身份认证等。检测系统对防御系统输出的数据进行二次检测,实时监控网络流量。响应系统紧急响应攻击事件并进行事件处理。恢复系统根据专家系统指示进行系统恢复和信息恢复。专家系统、防御系统和检测系统交互分别确定安全级别和安全策略,并检测新的攻击。
The security model of the proxy server based on PDRR consists of protection system, detection system, response system, recovery system and expert system. Protection system receives and tests data, validates identification. Detection system inspects output data of protection system again, and real time inspects and control flux of network. Response system responds attack event peremptorily and processes event. Recovery system recovers system and information according to indication of expert system. Expert system, protection system and detection system respectively confirms security level and strategy in alternation, and detects new attack event.
出处
《兵工自动化》
2004年第5期44-46,共3页
Ordnance Industry Automation
基金
江苏省高校自然科学研究计划重点项目(03KJA520066)
关键词
代理服务器
安全模型
PDRR
Proxy server
Security model
PDRR (protection-detection-response-recovery)
