CAJ | 학술논문

安全策略切换判决算法的设计面临着这样一对矛盾：效率与性能。如何在保证效率的条件下提高安全切换判决算法的性能是安全策略切换算法设计的一个难点。本文提出了一种基于网络辅助终端判决的安全策略切换判决算法，将网络QoS性能的评估交给网络端完成，有效的降低了终端的计算量，提高了效率。另外由于不同安全应用有着不同的QoS要求，因此本文充分考虑了安全应用的安全业务类型，在网络端针对四种不同业务类型分别设计了基于模糊逻辑的网络QoS得分计算方法，满足了安全应用的QoS需求。此外，本文充分考虑到这样一种情况：当前的网络状况不能代表未来的网络状况，而网络状况的变化一般呈现出一定的变化趋势。因此，本文利用当前的网络状态来预测未来的网络状况，为安全策略切换判决提供了更加全面的网络QoS信息。
안전책략절환판결산법적설계면림착저양일대모순：효솔여성능。여하재보증효솔적조건하제고안전절환판결산법적성능시안전책략절환산법설계적일개난점。본문제출료일충기우망락보조종단판결적안전책략절환판결산법，장망락QoS성능적평고교급망락단완성，유효적강저료종단적계산량，제고료효솔。령외유우불동안전응용유착불동적QoS요구，인차본문충분고필료안전응용적안전업무류형，재망락단침대사충불동업무류형분별설계료기우모호라집적망락QoS득분계산방법，만족료안전응용적QoS수구。차외，본문충분고필도저양일충정황：당전적망락상황불능대표미래적망락상황，이망락상황적변화일반정현출일정적변화추세。인차，본문이용당전적망락상태래예측미래적망락상황，위안전책략절환판결제공료경가전면적망락QoS신식。
Security strategy switch decision algorithm is faced with a contradiction: efficiency and perform-ance. How to improve the decision algorithms to ensure efficient performance under conditions of security strat-egy is difficult. This paper proposes a network assisted decision algorithm based on the judgment of the terminal security strategy, which will assess the performance of QoS to the network is completed, effectively reducing the amount of computation terminal and improve efficiency. Also due to the different security applications have dif-ferent QoS requirements, this type of full consideration of the security services security applications on the Grid network side for the four different types were designed by fuzzy logic score calculation method based on QoS to meet the security applications requirements. Additionally, this paper fully takes into account in such a situation: the current network status cannot represent the future of network conditions, and changes in network conditions generally show some trends. Therefore, using the current network status to predict future network conditions for security policy handover decision provides more comprehensive QoS information.