内网安全保障框架及信息管控模型研究

内网中的安全威胁来自网络接入、终端和人员3个方面,针对日益发展的信息攻击手段,积极防御是应对未知威胁、实现信息安全保障的有效解决方案。通过将内网安全划分为边界、局域网和终端3个层次,以安全保密BLP模型为理论基础制定安全规则,构建以桌面安全为主的保障技术框架,给出基于用户与资源分离的内网信息管控模型及实现,并进行了模型数据安全性分析。

Research on Intranet Security Assurance Frame and Information Management and Control Model

The security threats in the Intranet come from such three aspects as network access,terminal and persons.With the increasing development of information attack means,the active defense is an effective solution for information security assurance.By dividing Intranet security into such three layers as border,LAN and terminal,the security rules are established based on BLP model for security and the guarantee technique framework of giving first place to desktop security is constructed.Furthermore,the Intranet i...