Research on Security Protection Technology Based on Terminal Information Jump

Yi Wang,Yang Gao,Bing-Bing Luo

DOI: https://doi.org/10.1088/1742-6596/1651/1/012044

2020-01-01

Journal of Physics Conference Series

Abstract:This paper proposes a security protection model based on end-to-end information hopping to meet the actual needs of enterprise intranet protection. The problem has enhanced the proactive protection capability of the intranet.

What problem does this paper attempt to address?

Research on security extensions based on Java 2 security architecture

TIAN Yu-hong,WANG Ze-bing,FENG Yan

DOI: https://doi.org/10.3969/j.issn.1000-7024.2006.24.029

2006-01-01

Abstract:The Java virtual machine(JVM)is used more frequently as the basic engine behind dynamic web services.With the proliferation of network attacks on these network resources,much work are done to provide security for the network environment.Little effort has been placed on securing a Java web server where the attacker has a valid login to the host machine.After describing the vulnerabilities in Java's security mechanisms,an extended security system based on Java 2 security architecture is introduced.It also explains the runtime status of system.The increased assurance of correct system operation and the integrity of Java application server are provided.
Information Security Problem Research Based on Game Theory

Wei Sun,Xiangwei Kong,Dequan He,Xingang You

DOI: https://doi.org/10.1109/ISECS.2008.147

2008-01-01

Abstract:The purpose of this paper is to resolve information security problem in the mobile electronic commerce industry chain. We analyze information security based on evolutionary game theory. In this paper, we set up the information security game model with penalty parameter, calculate replicator dynamics, and analyze the evolutionary stable strategy of the game model. The result reveals that reducing the investment cost is the key factor to promote information security investment. If this condition can not be satisfied, the regulation of penalty parameter will help to promote the investment. The research method in this paper provides a new thought for the solution of information security in the mobile electronic commerce chain.
Research on Information Security Model and Security System Design

黄益民,平玲娣,潘雪增

DOI: https://doi.org/10.3785/j.issn.1008-973x.2001.06.005

2001-01-01

Abstract:After study of existing security models; analysis of information flow model, Bell-LaPadula(BLP) access control model and Biba access control model; and collation and comparison of their advantages and disadvantages, an improved model is put forward that satisfies the actual demands of information security. An implementation strategy is put forward that ensures information security, reliability, practicality and compatibility in the designed security system. An implementation scheme of this security system and its components and functions is provided. This system combines the following functions: mandatory access contro1, privilege separation, security audit, identity authentication and self-protection. It achieves the level 3 of national information security standard and level B1 of TCSEC standard. It was implemented in the Windows NT and Linux operating system and has yielded good resultsin application.
Network Safeguard System Based on IDXP

WANG Xiaodong,ZHU Miaoliang

DOI: https://doi.org/10.3969/j.issn.1000-3428.2005.07.055

2005-01-01

Abstract:This paper puts forward an intellective network safe guard system based on a multi-agent system structure. The purpose of the system is to defend the intrusion of campus-wide network. It is based on IDXP and the focus is blackboard. This system can deal with multi-levels and many ways of anti-intrusions, which has self-determination. It is proved to have a good performance by spot tests.
Research on Key Technology of Industrial Network Boundary Protection based on Endogenous Security

Fei Yu,Qiang Wei,Yangyang Geng,Yunchao Wang

DOI: https://doi.org/10.1109/imcec51613.2021.9482240

2021-06-18

Abstract:Industrial network boundary protection equipment faces threats from attackers when protecting the industrial control system network. The similarity and static characteristics caused by large-scale and long-term deployment determine that it could only defend against known attacks but could not deal with unknown APT threats, which leads to the breakthrough of one defense line is equivalent to the breakthrough of all defense lines and may bring challenges to industrial production safety. This paper proposes a mimic defense model of industrial isolation gateway based on endogenous security. With the dynamic scheduling mechanism to transform the attack surface, the gateway selects multiple heterogeneous filter executors to process the same packet simultaneously. By comparing the processing results of each executor, anomaly detection is carried out to realize the dynamic defense of the industrial isolation gateway. The experimental results show that the industrial isolation gateway based on mimic architecture can significantly increase the difficulty of backdoor utilization, such as paralysis, rule tampering, and information theft, and effectively defend the industrial control system from the threats caused by the backdoors and vulnerabilities of the isolation gateway while exerting the normal boundary protection function.
Security Protection Architecture for Power Enterprise Information Integration Based on Technology of Distributed Intrusion Tolerance with Multi-Level Defense Line

Yijia Cao

2008-01-01

Abstract:According to the development trend and present condition of security protection of power enterprise information integration,a security protection architecture of power enterprise information integration based on the technology of distributed intrusion tolerance with multi-level defense line is proposed.The intrusion tolerance strategies of the proposed architecture consist of following items:(A) the firewall is used as the fundamental protective measures;(B) at key nodes in non-realtime application network,the mobile agents are configured to implement on-line detection and tracking of internal and external intrusions;(C) after the intruder is successfully confirmed by intrusion detection system,according to the requirement of system security the honeypot technology based intrusion inducting system directionally inducts the locked invading flow,and the active defensive mode protects the legitimate system from invasion;(D) by means of slicing-scattering based distributed document management style,the resilient file system serves as the last defense line of enterprise memory system.Moreover,the key security protection problems pertinent to transverse and longitudinal information integration as well as the application of the technologies,such as mobile agents,honeypot,resilient file system and so on,in security protection system are analyzed.Finally,the application of the proposed secure protection architecture is briefly presented.
A Trustenclave-Based Architecture for Ensuring Run-Time Security in Embedded Terminals

Rui Chang,Liehui Jiang,Wenzhi Chen,Yaobin Xie,Zhongyong Lu

DOI: https://doi.org/10.23919/tst.2017.8030534

2017-01-01

Tsinghua Science & Technology

Abstract:The run-time security guarantee is a hotspot in current cyberspace security research, especially on embedded terminals, such as smart hardware as well as wearable and mobile devices. Typically, these devices use universal hardware and software to connect with public networks via the Internet, and are probably open to security threats from Trojan viruses and other malware. As a result, the security of sensitive personal data is threatened and economic interests in the industry are compromised. To address the run-time security problems efficiently, first, a TrustEnclave-based secure architecture is proposed, and the trusted execution environment is constructed by hardware isolation technology. Then the prototype system is implemented on real TrustZone-enabled hardware devices. Finally, both analytical and experimental evaluations are provided. The experimental results demonstrate the effectiveness and feasibility of the proposed security scheme.
Research on the Information Security Technology of University Campus Network

Changyi Wang,Zhuo Zhang,Xianhua Song

DOI: https://doi.org/10.1007/978-3-642-30223-7_35

2012-01-01

Abstract:With the rapid development of network technology, the network security has gained more and more attention. The modern university campus network is an open network environment, and many users are using the internal network to achieve office automation and resource sharing, so that the security of the intranet information becomes increasingly important. This paper analyzes and studies the security issues faced by current campus network as well as the firewall technology, data encryption technology, intrusion detection technology, anti-virus technology, VLAN technology and other security technologies that can solve the issues.
Intranet security strategy based on a monitor system

Jia CHEN,Lei CHENG,Tiange SI,Yiqi DAI

DOI: https://doi.org/10.3321/j.issn:1000-0054.2007.04.040

2007-01-01

Abstract:To solve the problem of Intranet information leakage, this paper proposed a new Intranet security strategy. There are two characteristics in this strategy. In the first place, information is classified by hierarchical means. In the second place, a component called monitor is introduced. With exerting access control over the communication among the entities in the network, the monitor can dynamically isolate the physical connections among host computers involved in security. This new strategy not only ensures information security, but also improves resource utility efficiently. In addition, according to this strategy, a monitor system is also designed based on the Intel IXP2400 chip. Experimental results show that, by virtue of the powerful processing ability of IXP2400, the monitor system could efficiently process high-speed data stream in Gb/s-net.
Construction of the Secure Enterprise Network Based on Multi-layer Protection

Wang Hong-pin

Abstract:In this paper we first analyze the present situation of the network security. In view of current development trend of network attack, together with practical experience and research results, the paper proposes a workable enterprise network security multi-layer protection strategy, and has given a concrete construction plan. This plan not only takes seriously to protect system's constitution, but also integrated many level protection products. Application has shown that the plan can improve integration security protection func- tions of the enterprise network.

Engineering,Computer Science
Design and Implementation of A New Database Security Model Based on Hopping Mechanism

Zhanwei Cui,Jianping Zeng,Chengrong Wu,Shiyong Zhang

DOI: https://doi.org/10.1109/icasid.2015.7405649

2015-01-01

Abstract:Database security is an important part of information security. With the background of login verification, this paper proposes a database security model based on hopping mechanism and gives theoretical analysis to it. In the theoretical analysis, we gives the specific expression of the probability of successful attack and theoretical deducation of the expression. Finally, we establish the prototype of the model and carry out an experiment to validate it. The final experiment shows that the result accords with the theoretical analysis and the model we established has a high efficiency in the database security and can offer a new direction for the database security research.
Exploring Computer Information Security Technology and Protection Methods

Huahui Lv,Zhe Ming,Aidong Xu,Hang Yang

DOI: https://doi.org/10.1109/CISCE.2019.00100

2019-07-05

Abstract:Social development has driven the rapid development of computer technology and networks and computers and networks have become "universal" from "rare". But the security instability that followed has also become a major problem in testing individuals and society. Therefore, in the fast and stable establishment of the computer system, how to improve the computer security defense capability has become a difficult problem that we urgently need to study and explore. This paper first analyzes the basic concepts of information security, refines related issues and puts forward suggestions on how to prevent and measure methods based on actual conditions, hoping to help the governance business.

Computer Science
Research on Campus Network Security Problem and Protection Strategy

Yongli Liu,Weifang Zhai,Song Ji

DOI: https://doi.org/10.4018/978-1-7998-7705-9.ch060

2021-01-01

Abstract:With the “Internet +” era of arrival, the major colleges and universities are in the construction of the wisdom of the campus, students and teachers living with the campus network is more and more closely related, Campus network security has become the protection of the wisdom of the campus construction. Campus network security issues become increasingly serious; a single security protection has been unable to meet the current security needs. This paper analyzes the major security threats facing the campus network, and presents the campus network security protection measures from the physical layer, network layer, system layer, application layer and management of five aspects, thus constructing the campus network's overall security defense system. The system has multiple security protection for Campus Network, thus improving the security of the campus network.
Design and Implementation of Enterprise Network Security System Based on Firewall

Hui Yuan,Lei Zheng,Shuang Qiu,Xiangli Peng,Yuan Liang,Yaodong Hu,Guoru Deng

DOI: https://doi.org/10.1007/978-3-030-15235-2_142

2019-04-25

Abstract:With the rapid development of the network, in recent years, the Internet has greatly improved people’s lives, and the real-time, sharing and distance-removing characteristics of network information transmission have made the operation and management of enterprises more efficient and coordinated. The basis of refinement. At the same time, various network security incidents have followed, such as hacker attacks on computer network systems, and various types of viruses, Trojans and other active attacks emerge one after another. In this regard, this paper analyzes the enterprise network security system of firewall from the perspective of enterprise network security, briefly summarizes the background, advantages and disadvantages of firewall technology, and designs and implements a client software according to the actual needs of users. The network performs real-time intelligent security monitoring. After the system design is completed, the security is tested by building a simulation platform, including qualitative testing and quantitative testing, which are divided into security and performance to verify whether the system can achieve and guarantee performance.
A Campus Network Security Solution Based on Six-layer Security Architecture

顾国飞,沈建莉,王鹏,张世永

DOI: https://doi.org/10.3969/j.issn.1000-3428.2002.z1.060

2002-01-01

Abstract:Campus network security is an important problem now, and it comprises many different security levels. This paper presents a six-layer network security architecture, which consists of physical security, link security, network level security, information security, application security and user security. Then a multi-layer, comprehensive and distributed campus network security solution is presented based on it. This solution covers comprehensive aspects from low level to high level, from static passive prevention to dynamic active prevention ,from before ,between to after the intrusion ,from system to desktop and from host to network. It can give max security to the campus network and can also be used in other kind of LANs.
Research on Information Security Protection System of Industrial Control System

Zhenwan Zou,Yingsa Hou,Huiting Yang,Bin Wang,Ruxia Yang

DOI: https://doi.org/10.1109/itaic49862.2020.9338955

2020-12-11

Abstract:Aiming at the current status and risks of industrial control system information security, a security protection system was proposed from the technical and management levels. At the technical level, it strengthen security protection by setting up firewall protection, isolating engineer stations, conducting system security tests, and deploying network monitoring. At the management level, it improves safety management through measures such as real-time maintenance and updating of existing management systems and safety technology standards. Finally, the feasibility of this protection system was proved by experiments, which has certain reference significance for the research on safety protection of industrial control systems.
Research on the Main Threat and Prevention Technology of Computer Network Security

Xiang Gao,Liyuan Liu,Xuanbing Zhu

DOI: https://doi.org/10.1088/1755-1315/632/5/052065

2021-01-01

IOP Conference Series: Earth and Environmental Science

Abstract:Abstract with the arrival of information age, network has become an essential part of people's life, no longer exists as a tool. At the same time, network security has attracted more and more attention. In order to make the network more secure and reliable to play its value, understanding the main threat and its countermeasures of the current computer network is very necessary. This article first makes a brief introduction to the computer network security, introduces the concept, the development present situation and development trend, then expounds the computer network of the main threats, including five aspects such as hackers, spyware, computer virus and so on. Finally discusses the commonly used 5 prevention technologies at present, including firewall technology, antivirus technology, data encryption technology, intrusion detection technology and access control technology. Only by paying attention to network security can we protect our own interests.
Analysis of Influencing Factors and Countermeasures of Computer Network Security

Yanli Liu,Meng Cui

DOI: https://doi.org/10.1007/978-3-030-51431-0_39

2020-07-24

Abstract:Since the new century, with the gradual popularization of computer networks around the world, network security defense methods have become more sophisticated and comprehensive, but they are still unable to defend against increasingly sophisticated and increasingly globalized virus attacks. In the process of network use and promotion, the influence of viruses on the network and hackers’ attacks have become an important factor threatening network security. Especially when people use the Internet to pay funds, remittances and other online financial activities, network security has become a constant topic. Establishing an efficient network security incident response system is of great significance for the network to better play its role. Based on the research of network security monitoring, network attack defense, network data backup and recovery theory and technology, this paper studies the strategy model of network security incident response, and uses relevant theories and methods of software engineering, combined with programming languages, to achieve Related application modules of this model. This article implements a low-cost, high-performance multi-data backup and recovery system that works in conjunction with other security devices and systems in the network. The overall structure and workflow are analyzed and designed to achieve multi-point backup and Fast recovery, efficient synchronization strategy for remote data, etc. The experimental research found that the network security incident response system can effectively reduce the security risk of the internal network, with a security proportion of more than 92%.
Network Security Evaluation Model Based on Cloud Computing.

Jin Yang,Cilin Wang,Le Yu,Caiming Liu,Lingxi Peng

DOI: https://doi.org/10.1007/978-3-642-34041-3_68

2012-01-01

Abstract:Cloud computing is an important innovation in the current computing model. The critical problem of cloud computing faced at present is the security issue. In the current network environment, that relying on a single terminal to check the Trojan virus is considered increasingly unreliable. Based on the correspondence between the artificial immune system antibody and pathogen invasion intensity, this paper is to establish a real-time network risk evaluation model in cloud computing. This paper builds a hierarchical, quantitative measurement indicator system, and a unified evaluation information base and knowledge base. The paper also combines assets evaluation system and network integration evaluation system, considering from the application layer, the host layer, network layer may be factors that affect the network risks. The experimental results show that the new model improves the ability of intrusion detection and prevention than that of the traditional intrusion prevention systems.
Research on Network Security of Campus Network

Min Huang,Wanbo Luo,Xing Wan

DOI: https://doi.org/10.1088/1742-6596/1187/4/042113

2019-04-01

Journal of Physics: Conference Series

Abstract:Nowadays, network security incidents often occur, such as network worms, denial of service attacks, network fraud and so on. Nowadays, the methods of network security incidents are constantly innovating, resulting in data leakage, destruction and other incidents. Campus network is the basis of daily teaching, scientific research and normal operation of schools. It is of great significance to strengthen the construction of campus network security. Based on this, this paper studies the campus network security.

Research on Security Protection Technology Based on Terminal Information Jump

Research on security extensions based on Java 2 security architecture

Information Security Problem Research Based on Game Theory

Research on Information Security Model and Security System Design

Network Safeguard System Based on IDXP

Research on Key Technology of Industrial Network Boundary Protection based on Endogenous Security

Security Protection Architecture for Power Enterprise Information Integration Based on Technology of Distributed Intrusion Tolerance with Multi-Level Defense Line

A Trustenclave-Based Architecture for Ensuring Run-Time Security in Embedded Terminals

Research on the Information Security Technology of University Campus Network

Intranet security strategy based on a monitor system

Construction of the Secure Enterprise Network Based on Multi-layer Protection

Design and Implementation of A New Database Security Model Based on Hopping Mechanism

Exploring Computer Information Security Technology and Protection Methods

Research on Campus Network Security Problem and Protection Strategy

Design and Implementation of Enterprise Network Security System Based on Firewall

A Campus Network Security Solution Based on Six-layer Security Architecture

Research on Information Security Protection System of Industrial Control System

Research on the Main Threat and Prevention Technology of Computer Network Security

Analysis of Influencing Factors and Countermeasures of Computer Network Security

Network Security Evaluation Model Based on Cloud Computing.

Research on Network Security of Campus Network