论文部分内容阅读
针对“网震”和“斯诺登”事件物理隔离存在边界安全被突破的事实,其能否起到真正安全隔离作用成为重点关注的问题。文章介绍了物理隔离的三个实现技术及其2个演化进程并对每一个进程做个安全性分析,指出了目前物理隔离存在的安全问题,给出了建立新型物理隔离边界安全防护的建议是建立全局文件交换管理体系、统一文件交换格式、建立物理电磁泄漏发射防护要求、防内存泄漏等,进而提出基于单向导入技术和量子密码技术物理隔离新的组网方式并分析了适用场景,提出了安全隔离和信息交换系统应解决的一系列问题,指出新兴密码技术对物理隔离是一个终结挑战。希望文章的研究结果能对网络边界安全防护工作的进一步开展起到积极的重大推动作用。
In view of the fact that the border security has been broken through the physical isolation of the “Web Squadron” and the “Snowden” event, whether it can act as a true security isolation becomes a key issue. This paper introduces three implementation techniques of physical isolation and its 2 evolution processes and analyzes each process for its security. It also points out the current security problems of physical isolation and gives some suggestions on how to establish a new type of physical isolation boundary security The establishment of a global file exchange management system, unified file exchange format, the establishment of physical electromagnetic leakage emission protection requirements, anti-memory leaks, etc., and then put forward based on one-way import and quantum cryptography physical isolation of the new networking approach and analysis of the applicable scenarios A series of questions to be solved by the security isolation and information exchange system points out that emerging cryptography is an end-to-end challenge to physical isolation. I hope the research results of the article can play a positive and significant role in promoting the further development of network border security work.