Abstract: Network security is an important problem in network development and application. Research of network security architecture is more adaptive to dynamically changing network security than traditional security technology. In this paper, a kind of new security architecture of dual routers based on masked subnetwork is established after systematically analyzing dynamical network security model P2DR. It meets to the principle of P2DR, implements unification of the policy, the protection, the detection and the response.

摘要： 网络安全问题是网络发展和应用中的重要课题，网络安全体系结构的研究较传统的安全技术更加适合动态变化的网络安全问题。该文在分析动态网络安全模型P2DR的基础上，建立了面向屏蔽子网的双路由器的安全体系结构，实现了策略、防护、检测、响应的统一。

关键词: 网络安全, 体系结构, 动态安全模型, P2DR

CLC Number: 

• TP393.08