查询词典 network security

Firstly, this paper puts forward an improved authentication and key distribution scheme for internet environment, in which we adhibit multilevel authentication center, encryption technology of DES, RSA and one-way function to actualize the safety of communication among the different user on network and reduces the workload of the authentication institution; at the same time, this scheme can also assure the security of network. Besides, it use the temporary symbol and the responds" sign of both-side correspondent to replace time stamp and applies them to internet communication to countercheck "rebroadcast attack and accordingly resolves the problem that it needs synchronization for network clock.

本文在首先提出一种改进的Internet网络环境下的认证及密钥分配方案，该方案考虑采用了多级认证中心，DES、RSA和单向函数加密机制，实现了网络上不同用户间的安全通信，降低了网上认证机构的工作量，同时也能够保证网络的安全性；并用通信双方的临时标志和响应者标识来代替时间戳应用于Internet通信中以防止"重播"攻击，从而解决了以往需要网络时钟同步这一难题。

The main work and innovation of this dissertation are: 1. The network management domain-specific mobile agent system architecture and mobile agent model are proposed and described in details. The lifecycle of mobile agent is described by using state diagram. The layered security model is introduced. The mobility model is distinguished by the complete and partial one as well as the explicite mobility and implicite one. 2. Aimming at the complexity and heterogeneity of the network, the abstract network entity is presented and defined in details. The mobile agent is also classified and studied from the point of the mobile mechinisim along with the resposibility view. The NMBMA, which the main component is ANE, is put forward and described by using organizational, informationl, computational and implementary model. 3. The two architectures, NMBMA and Client/Server-based one, are compared and analyzed quantitatively and qualitatively. 4. The prototype based on the above NMBMA is designed and some examples are described in the prototype.

主要工作与创新是：提出并详细描述了面向网络管理领域的MAS结构和流动软件代理模型及其内部结构，并采用状态图描述了流动代理的生命周期；提出了层次的安全模型；从数据管理和实现方式两个方面，区分了流动模型即完全流动和部分流动以及显式流动和隐式流动；针对网络的异构性和复杂性，提出了抽象网络实体ANE的概念，并进行了定义；从流动机制和职能两个角度，对流动代理进行了分类研究；以ANE为主要部件，从组织模型、信息模型、通讯模型、实施模型四个侧面描述了NMBMA；定量和定性比较分析了NMBMA与传统的基于Client/Server模型网络管理体系结构；通过一个原型系统的设计和网络管理实例，验证了NMBMA是可行的。

Apply the platform using the network communication foundation and the advanced network, constructs a security, reliable, open, the highly effective information network and the office automation, the information management computerization system, provides modernized for the control section the daily work condition and the rich comprehensive information service, the realization records management automation and work business processes the automation, enhances the office efficiency and the management level, the realization enterprise various departments daily office work standardization, the computerization, the standardization, enhancement file department file and so on copy clerk file, dossier, science and technology file, financial file manipuilities, realizes the information online inquiry, borrowing.

利用网络通讯基础及先进的网络应用平台，建设一个安全、可靠、开放、高效的信息网络和办公自动化、信息管理电子化系统，为管理部门提供现代化的日常办公条件及丰富的综合信息服务，实现档案管理自动化和办公事务处理自动化，以提高办公效率和管理水平，实现企业各部门日常业务工作的规范化、电子化、标准化，增强档案部门文书档案、人事档案、科技档案、财务档案等档案的可管理性，实现信息的在线查询、借阅。

Main intelligent control all types of buildings (including access control, security, Patrol, fire interaction, environmental monitoring, video surveillance, etc.), network systems integration (including large and medium-sized MAN, the network, campus network, the banking system ), And other information systems planning, design, construction, testing and operation and maintenance, the provision of professional industry solutions and industry applications advice.

主营各类楼宇智能控制（包括门禁、安防、巡更、消防联动、环境监测、图象监控等）、网络系统集成（包括大、中型城域网、政府网、校园网、银行系统）等信息系统的规划、设计、建设、测试和运行维护，提供专业的行业解决方案和行业应用咨询。

We begin with an introduction of the research background, the difference between traditional network management and security-oriented network management, and the contributions of this paper. Then we present the structure and the principles of the SIMP: we put forward to a functional and hierarch model based on JMX specification and Struts technology And a JMX-based network management model.

本文首先介绍了课题的背景、网络安全管理相对于网络管理的特点和本文的研究内容，针对传统网络管理的不足，提出了安全集中管理系统的总体结构、组成及工作原理：安全集中管理平台的体系结构采用JMX技术作为系统的集成总线，将各管理功能模块作为JMX管理构件，实现了系统的组件化、模块化的开发；层次结构采用了基于Struts的MVC架构模式，底层数据库采用了对象关系映射技术，提高了系统的可维护性和可扩展性。

The next generation optical network will be divided into multiple routing domains to improve the performance of routing and signaling, network reliability, scalability and security. It will be essential to define the border of network management and to adopt the technology of distributed management and hierarchical routing.

为了定义网络的管理边界、提高路由和信令的性能、提高网络的可靠性，可扩展性和安全性以及兼容不同系统间的技术差异，以ASON为代表的下一代光网络将被划分为多个路由域，采用分布式管理和分层的网络路由体系。

From the practical point of view,it notedly expounds the network topology design,network hierarchy,system design,IP planning,division of subnet VLAN,security design,equipment selection and cabling system as well as relative technologies,aimed at constructing a advanced and practical campus network.

从实用的角度重点论述了校园网的拓扑结构设计、网络层次结构、系统总体设计、IP规划、子网VLAN划分，安全设计、设备选型以及综合布线系统等相关技术，其目的是要建设一个先进、实用的校园网。

With the development of communication and network technology, more and more control systems are connecting with State Power Data network. Especially the power market is being put into operation, and more data are exchanged. The control system and data network face a big challenge about security, reliability and real time operation.

随着通信技术和网络技术的发展，接入电力调度数据网的控制系统越来越多，特别是电力市场的发展，数据交换非常频繁，这对电力控制系统和数据信息网络的安全性、可靠性和实时性提出了新的挑战。

In order to improve the reliable transmission efficiency, Ahlswede et al. introduced the network coding theory. Network coding can not only increase network throughput, but also advance in data universalness, robustness, reliability and security.

为了实现更高的传输效率，Ahlswede等人提出采用网络编码的方法，不但可以提高网络吞吐量，而且在普适性、鲁棒性、可靠性和安全性等方面都具有优势。

Firstly, this paper puts forward an improved authentication and key distribution scheme for internet environment, in which we adhibit multilevel authentication center, encryption technology of DES, RSA and one-way function to actualize the safety of communication among the different user on network and reduces the workload of the authentication institution; at the same time, this scheme can also assure the security of network. Besides, it use the temporary symbol and the responds" sign of both-side correspondent to replace time stamp and applies them to internet communication to countercheck "rebroadcast attack and accordingly resolves the problem that it needs synchronization for network clock.

本文在首先提出一种改进的Internet网络环境下的认证及密钥分配方案，该方案考虑采用了多级认证中心，DES、RSA和单向函数加密机制，实现了网络上不同用户间的安全通信，降低了网上认证机构的工作量，同时也能够保证网络的安全性；并用通信双方的临时标志和响应者标识来代替时间戳应用于Internet通信中以防止&重播&攻击，从而解决了以往需要网络时钟同步这一难题。

The split between the two groups can hardly be papered over.

这两个团体间的分歧难以掩饰。

This approach not only encourages a greater number of responses, but minimizes the likelihood of stale groupthink.

这种做法不仅鼓励了更多的反应，而且减少跟风的可能性。