面向网络管理的移动主体安全设施

移动主体技术为网络管理提供了一种新方法，但同时也带来了一些不安全因素．全面分析了采用策略与移动主体技术进行网络管理所面临的各种安全问题和相应的解决方案，提出了面向网络管理的移动主体安全设施MASF(mobile Agent security facility)．MASF无缝集成了存储保护、加密、鉴别、完整．陛验证、授权、访问控制、安全日志等安全机制．基于MASF开发了一个实际的域间虚拟专用网络管理系统，应用表明,MASF能较好地满足网络管理的安全需求．

Mobile Agent Security Facility for Network Management

Mobile Agent technology provides a new means for network management, but it also brings some insecurity factors at the same time. Based on the analysis of the security threats and the corresponding measures that may occur during the policy and mobile agent based network management applications, the MASF (mobile Agent security facility) for network management is presented. MASF supports a wide span of security mechanisms such as storage protection, confidentiality, authentication, integrity, authorization and security log, all these mechanisms are seamlessly integrated to secure the network management. Based on MASF, a practical network management application, inter-domain virtual private network configuration, is developed. Verified by the application, MASF can satisfy with most security requirement of network management.