本文提出了一种基于SSL安全通信的自防御网络体系,与传统的网络安全解决方案相比,能在一定程度上解决园区网络的安全问题。基于SSL安全通信的自防御网络体系主要由两个子系统组成:网络准入子系统和蠕虫检测子系统。为了避免因为本系统的引入造成了新的安全问题,所以引入了SSL安全通信机制,保证了客户端和服务器通信的安全性。 This paper presents a self-defense network system based on SSL secure communication. Compared with the traditional network security solutions, it can solve the security problem of campus network to a certain extent. The self-defense network system based on SSL secure communication mainly consists of two subsystems: network access subsystem and worm detection subsystem. In order to avoid the new security problem caused by the introduction of the system, an SSL secure communication mechanism is introduced to ensure the communication between the client and the server.