與傳統網絡相比，主動網絡作為一種新型的中間節點可編程網絡體系結構，具有很
大的靈活性和開放性，但同時這些特點也使主動網絡的安全問題變得更加突出。本文從主動節點的角度進行安全性分析，提出了一系列安全防范措施，并在此基礎上設計了一種主動網絡節點的安全體系模型。該模型采用認證、授權、主動權能動態加載策略等安全措施保護主動節點資源免受惡意信包的攻擊。
關鍵詞：主動網絡；網絡安全；認證；授權；主動權能
Analysis and Research on Security Model of Active Network ZHANG Ling,DING Zhen-guo (XIDIAN University, Xi’an 710071, China) Abstract：Compared with the traditional network, Active network is more flexibility and opened as a new network architecture with the programmable intermediate network node, but at the same time, its security issue have become more prominent. This paper makes the security analysis from the sight of the active network node, put forward a series of security measures and build a new security model of active network node based on them. This model protects the active network node from the attack of vicious capsule with authentication, authorization and active capability loads strategy dynamically.
Key words: Active network; Network Security; Authentication; Authorization; Active Capability