摘要： 大多数可信网络系统使用的完整性度量技术仅能度量可执行文件而忽略了脚本文件，造成安全隐患。针对该问题，设计实现一种基于流量特征的可信网络系统，不仅对终端进行完整性度量，还利用终端网络流量的周期统计信息判断终端的完整性状态，由此保证脚本文件的可信性。在Linux上实现该系统，结果证明其能够快速检测出特定的脚本病毒。
关键词:
可信网络系统,
网络流量特征,
完整性管理,
完整性度量,
可信计算,
可信平台模块
Abstract: Most integrity measurement technologies of trusted network systems make use of focuses on executable files. In order to solve the problem that integrity measurement can not guarantee the credibility of the script files, this paper designs a trusted network system based on network traffic characteristics. Besides executing the integrity measurement, the system also computes the network traffic statistic information to judge the integrity state of the endpoint, which can be used to detect security threats when executing scripts. The system is implemented on Linux, and application results show that the system can detect some script viruses quickly.
Key words:
trusted network system,
network traffic characteristic,
integrity management,
integrity measurement,
trusted computing,
Trusted Platform Module(TPM)
中图分类号:
杨文思, 张斌, 于爱民. 基于流量特征的可信网络系统设计与实现[J]. 计算机工程, 2012, 38(12): 115-117.
YANG Wen-Sai, ZHANG Bin, XU Ai-Min. Design and Implementation of Trusted Network System Based on Traffic Characteristic[J]. Computer Engineering, 2012, 38(12): 115-117.