Journal of Xi'an Jiaotong University

Analysis Method for Internet Architecture Security
Li Wei¹，Cai Zhongmin²，Guan Xiaohong²
（1.Department of Computer Science and Technology， Xi'an Jiaotong University， Xi'an 710049， China；
2.Institute of System Engineering， Xi'an Jiaotong University， Xi'an 710049， China）

Abstract：An analysis method of Internet architecture security is presented by introducing the concept of access relations and access streams to show that the access control is a procedure to reduce access relations according to certain security policies in the traditional network access control. On the basis of the concept, a new scheme of data classification is proposed based on real and anonymous addresses and network addresses of the control and application data. A set of the corresponding global access control rules is established under the conditions of the openness and manageability of the uniform network, security and user privacy. The analysis of the scheme shows that the proposed method reduces access relations significantly, and the level of the Internet architecture security is increased wholly.
Keywords：network security； access control； Internet architecture； access relation