摘要
针对军事网络特殊安全需求,提出了一种组合出入口访问控制的网络边界安全防护手段,在抗网络攻击方面,采用包过滤防火墙与基于神经网络和基于协议分析和规则匹配的入侵检测技术相结合的方法,提高入侵检测的准确性;在防信息泄密方面,在出口访问控制中引入身份认证机制及内容审查和过滤机制,可建立更灵活的安全审计和访问控制策略,有效阻截敏感或涉密信息外泄,实现对泄密源的有效跟踪。
To satisfy the special needs of military networks, a protection method combining ingress and egress access control for network edge security is proposed. On the side of dealing with network attacks, a combined mechanism of packets filtering firewall and intrusion detection system based on artificial neural network and rule matching is implemented, to increase the accuracy of intrusion detection. On the side of prohibiting secret leakiness, techniques of identity authentication and contents filtering are integrated into the mechanism of egress access control, so strategies with more flexibility in security auditing and access control can be implemented, the sensitive or secret data can be blocked from leaking out and the source of leakage can be traced effectively.
出处
《计算机与数字工程》
2009年第9期102-104,183,共4页
Computer & Digital Engineering
关键词
军事网络
防火墙
入侵检测
身份认证
人工神经网络
内容过滤
military networks, firewall, intrusion detection, identity authentication, artificial neural network, contents filtering
