关键词: 网络安全, 协同操作, 组件, 协同响应, 安全域

Abstract: Nowadays, it is very difficult for various network security components to adopt unified security policy in one network environment, which results in not fully taking advantage of the whole network protection. The authors presented a cooperative model based on security domain layer with three-layer structure and two-class management. The security domain was used as the fundamental unit to implement collaboration and management, and an Intrusion Detection Exchange Protocol (IDXP) protocol based on Blocks Extensible Exchange Protocol (BEEP) frame was implemented to transmit Intrusion Detection Message Exchange Format (IDMEF) messages. The experimental results demonstrate that this model and IDXP can effectively implement message transmission and collaborative operation.

Key words: security network, collaborative operation, component, cooperative response, security domain