新型网络安全防护技术—网络安全隔离与信息交换技术的研究

【作者】 苏智睿；

【导师】 王晓斌；

【作者基本信息】 电子科技大学 ， 计算机软件与理论， 2004， 硕士

【摘要】 网络安全隔离与信息交换技术是实现不同安全要求网络间可靠安全隔离,同时保障信息可靠交换,从而提升内部网络安全级别的新型网络信息安全技术。本文针对目前网络安全威胁及网络信息安全技术现状,简要介绍网络安全隔离的研究历史背景和意义,并提出以信息安全产品通用评估准指导网络安全隔离与信息交换技术安全功能的设计。信息安全产品通用评估准则(CC)作为信息安全方面的一个基础性框架性标准,对指导信息安全产品开发,规范合格评定,提高产品质量,为信息安全的行政管理提供技术支持等方面,都具有十分重大的现实意义。因此,我们对通用评估准则的历史、在我国的实施情况、组织结构以及基本的一些知识概念和要求做详细介绍。随后,我们从模型的角度,提出网络安全隔离与信息交换技术框架。并根据通用评估准则的要求和规范,制定了相关的安全功能要求包。在进行技术框架的细化设计后,我们深入分析网络安全隔离与信息交换技术的数据处理流程、工作机理,以突出网络安全隔离与信息交换技术与现有网络安全防护技术相比所独有的技术优势,并验证技术框架设计和安全功能与我们所制定的安全功能包之间一致性。最后,我们对网络安全隔离与信息交换技术特点进行了总结,并展望该技术的广阔前景。更多还原

【Abstract】 As a new technology, Network Safe Isolation and Information Exchange Technology can realize the safe isolation of networks with different security request, at the same time guarantee the reliable information exchange, so as to upgrade the security level of internal network. We aim at the threats of network security and the status quo of information security technology, give an introduction of the research background and purpose of network safe isolation. Then, we decide to design the framework of Network Safe Isolation and Information Exchange Technology with the guidance of information security technology Common Criteria (CC).Common Criteria is a basic framework standard of information security technology. It can not only be used to direct the development and design of information security product, evaluate the information security product standardly, but also help to improve the quality of product and the progress of technology, give supports of information security administration. Based on the important sense and value gived above, we introduce the history of Common Criteria, the implement situation in our country and the structure and basic knowledge of Common Criteria.Then,We give the Network Safe Isolation and Information Exchange Technology framework from the viewpoint of model. And we provide the security request package according to Common Criteria to the security request of Network Safe Isolation and Information Exchange Technology. After expatiating on the thesis design and the process of data treatment of the technology framework particularly, we emphasizes its unique technology advantages and merits compared with other network protection technology, validate the consistency between the framework and security function package.Finally, we sum up the technology characteristic and show the future of the technology.更多还原