|
|||||
|
|
| 计算机网络防御策略模型 | |
| 引用本文： | 夏春和,魏玉娣,李肖坚,何巍. 计算机网络防御策略模型[J]. 北京航空航天大学学报, 2008, 34(8): 925-929 |
| 作者姓名： | 夏春和 魏玉娣 李肖坚 何巍 |
| 作者单位： | 北京航空航天大学 虚拟现实技术与系统国家重点实验室, 北京 100191 |
| 基金项目： | 北京市教委共建计划，国家高技术研究发展计划(863计划) |
| 摘 要： | 目前计算机网络防御研究中缺乏高层且易于细化的策略建模方法,因此在分析Or-BAC模型(Organization Based Access Control model)的基础上,对网络防御控制行为进行抽象,建立计算机网络防御策略模型(CNDPM,Computer Network Defense Policy Model).该模型对保护、检测和响应等策略进行统一建模,并引入角色、视图、活动自动分配的方法,以提高分配的效率,同时给出了策略到规则的推导规则,以细化为具体的防御规则.还给出了策略的完备性、有效性和一致性的形式化描述及分析.实例分析表明,该模型表示的计算机网络防御策略,能够有效地转化为防御规则,具有较好的实用性和扩展性. |
| 关 键 词： | 计算机网络防御(CND) 策略 PPDR模型 细化 |
| 收稿时间： | 2007-09-06 |
Computer network defense policy model |
|
| Xia Chunhe,Wei Yudi,Li Xiaojian,He Wei. Computer network defense policy model[J]. Journal of Beijing University of Aeronautics and Astronautics, 2008, 34(8): 925-929 | |
| Authors: | Xia Chunhe Wei Yudi Li Xiaojian He Wei |
| Affiliation: | State Key Laboratory of Virtual Reality Technology and System, Beijing University of Aeronautics and Astronautics, Beijing 100191, China |
| Abstract: | Recent research on computer network defense is lack of a method which is able to model policy in high level and refine policy conveniently,hence computer network defense policy model(CNDPM) was presented to abstract network defense control behavior on the basis of organization based access control model(Or-BAC).The CNDPM provides a common method to model protection,detection and response policy,and introduces automatic assignment mechanism of role as well as view and activity to improve efficiency,also prov... |
| Keywords: | computer network defense (CND) policy PPDR model refinement |
| 本文献已被 CNKI 维普 万方数据 等数据库收录！ | |
| 点击此处可从《北京航空航天大学学报》浏览原始摘要信息 | |
| 点击此处可从《北京航空航天大学学报》下载全文 | |