信息安全面临的挑战和对策

123••##Internet/Extranet/IntranetInternet/Extranet/Intranet#TCP/IP#TCP/IPB/W/DB/W/D••#$10000#$10000##10~2010~20••##ECECEGEGNMNMDLDLDEDEDMDMNBNBNSNS#VL#VLVEVEVCVCVMAVMAVMVVMV••55CC##45————••••••••••••IPIP6————••1010/20/20••1000~15001000~1500••9898AnalizaAnaliza••99994040••200020002277$$1212YahooYahooAmazonAmazonCNNCNNBuyBuyeBayeBayEtradeEtrade••CDUniverseCDUniverse••$170$170//••$100$100//7————••1%1%1010••8080••••••8————••1010••14000140004410/10/••52%52%••19881988UNIX/EmailUNIX/Email60006000$9000$9000••19981998CIHCIH20002000••19991999Window/EmailWindow/Email$8000$8000••2000200012001200$$••20012001////9————••••WebWeb••••CIACIA30%30%••14%14%••10————••Solaris:34Solaris:34/99/99W2000W2000BugBugTCP/IPTCP/IP••30%30%••USUS30%30%25%25%30%30%50%50%••““AOLAOL””96961010700700200020002.72.78824~7224~7211————••••••••••12————••————————••••13————••••••1010//••••55//••••P2PP2P14Hacker(MMMMaster(zzzzzzzzZombie2.72.7DDoSDDoS15Hacker(MMMMaster(zzzzzzzzZombieTarget2.72.7DDoSDDoS16——2.72.7——••50%50%30003000$1000$100030%30%30%30%25%25%••CNNCNN100100AmasonAmason82082033$$1212••221616$900$900$20$201718————••••••••••••••••19••••••••##CRAMMCRAMM##SVISVI••CCCCIATFIATFTCSECTCSEC202122••TnTn••VnVn••SMLnSMLn))••IATRnIATRn••IATRnIATRn=f=fVnVnTnTnSMLnSMLnEALnEALnCC/TCSEC/IATFCC/TCSEC/IATF23••••••••••••//PDRPDR••••24••ISO7498ISO7498--22SFSF••DISSP/DGSADISSP/DGSA••PDRPDR2526IPIPTCPTCPYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYY27YYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYY28/DISSPDISSPNSANSA29••##DoDDoDGoalSecurityArchitecture(DGSA)GoalSecurityArchitecture(DGSA)••##TAFIMTAFIM••##ESES##RSRS##CNCN##LCSLCS##LSELSE30PDRPDR••““tt””#Pt#PtProtectionProtection##DtDtDetectionDetection##RtRtResponse/RecoveryResponse/Recovery••PtPtDtDt++RtRt31••••••••••••••••••32Email/webEmail/webIntranetIntranetExtranetExtranetEGEGECECEBEB•PKI/CA•PMI•RBAC•PICS•S/OS-DB•SNG/SNF•S/SSO•FW•IDS•VPN•Proxy•ID•VLAN•ACL•AV•FW33••••RBACRBACIDSIDSVPNVPN••PKIPKIPMIPMIDRIDRIKMIKMI••ECECEGEGNBNBNSNSNMNMWFWFXMLXMLCSCWCSCW••TEMPEXTEMPEX••34••••CA/PKICA/PKIToKenToKen••ACLACLLabelLabelRBCARBCAPMIPMI••FWFWProxyProxyNGNGNFNF••••••••AgentAgent••••““””••““””OSOSICIC35••DESDESRSARSATT--DESDESRC2RC2AESAES••EESEES••DSSDSSRSARSASHASHA--11MD5MD5••SNMPSNMPv2v2SNMPSNMPv3v3••S/MIMIS/MIMIPGPPGPPEMPEM••PKIPKIPKIXPKIX••PMIPMI••IEEE802.10IEEE802.10ISAKMPISAKMPKMIKMI••••SSIDSSIDWEPWEPIPsecIPsecRadiusRadius36••X.X.509.V3509.V3X.X.509.V4509.V4••SSLSSLSHTTPSHTTPTLSPTLSP••IPIPVPNVPNIPIPSECSECIPIPV6V6RadiusRadius••CAPICAPIGSSGSS--APIAPICDSACDSA••ACLACLROACROACACAC••KerberosKerberosDSSADSSAYaKshaYaKsha••TCSESTCSESCCCC••CIDFCIDF••OSI7498OSI7498--22DGSADGSAXDSFXDSFDISSPDISSP••PICSPICS••WebWebWSSecurityWSSecurity37••CCCCTCSECTCSEC••CA/PKICA/PKI••CERTCERT••AVERTAVERT••DRIDRI••••••••••38••93%93%••70%70%••43%43%3940