支持网络动态重构的可信构件模型

doi:10.3969/j.issn.1000-436x.2013.03.005

摘要/Abstract

摘要：

基于构件接口分离原则和动态软件体系结构技术，提出了一种支持网络动态重构的可信构件模型，对构件构造和组装进行了分析，并提出了可信数据安全封装机制。基于感知、决策和执行分离机制，构件模型可以支持构件重构，通过容器对构件数据进行安全封装，构件模型可以检测和阻止恶意构件的非法操作，保护构件间的数据安全传递。实现了支持可信构件模型的容器原型，实验表明，使用该模型可进行构件连接拓扑关系的重构，可及时发现恶意构件并暂停构件运行，提高了节点的可信性。

关键词: 可重构柔性网络, 可信, 构件模型, 安全封装, 可重构

Abstract:

Based on principles of the separation of concerns and the dynamic software architecture (DSA) technology, a component model named TCM(trustworthy component model)was proposed. Formation and assemblage of components were analyzed, then a trustworthy data security sealing mechanism was proposed. By sealed the data, the TCM not only support reconfiguring components, but also prevent component hostility operation, which can destroy the data transmis-sion. A container prototype was implemented, and experimental applications were implemented to validate this approach. The results show that this model can change the topology of components and find out the hostility components, which improve the trustworthy of reconfigurable flexible network node.

Key words: reconfigurable flexible networks, trustworthy, component model, security sealing; reconfiguration

袁博,汪斌强,马东超. 支持网络动态重构的可信构件模型[J]. 通信学报, 2013, 34(3): 32-43.

Bo YUAN,Bin-qiang WANG,Dong-chao MA. Trustworthy component model supporting networks reconfiguration[J]. Journal on Communications, 2013, 34(3): 32-43.

图/表 16

图1

图2

图3

图4

图5

图6

图7

图8

图9

图10

图11

图12

图13

图14

图15

图16

参考文献 27

[1]	汪斌强, 邬江兴 . 下一代互联网的发展趋势及相应对策分析[J]. 信息工程大学学报， 2009,10(3): 1-6. WANGB Q , WUJ X . Development trends and associated counter-measures analysis for NGN[J]. Journal of Information Engineering University, 2009,10(3): 1-6.
[2]	袁博, 汪斌强, 张博 . 绿色网络的实例——可重构柔性网络[J]. 电信科学， 2011,27(10A): 200-207. YUANB , WANGB Q , ZHANGB , A case study of green network——reconfigurable flexible network[J]. Telecommunications Science, 2011,27(10A): 200-207.
[3]	MEIH , SHENJ R . Progress of research on software architecture[J]. Journal of Software, 2006,17(6): 1257-1275.
[4]	VALLECILLOA , HERNANDEZJ , TROYAJ M . Component Intero-perability[R]. ITI200037, Universidad de Málaga, 2000.
[5]	YANGF Q . Thinking on the development of software engineering technology[J]. Journal of Software, 2005,16(1): 1-7.
[6]	SALEHIEM , TAHVILDARIL . Self-Adaptive software: landscape and research challenges[J]. ACM Trans on Autonomous and Adaptive Systems, 2009,4(2): 1-42.
[7]	WANGQ X . Towards a rule model for self-adaptive software[J]. Sigsoft Software Engineering Notes, 2005,30(1): 1-5.
[8]	KEENEYJ . Completely Unanticipated Dynamic Adaptation of Soft-ware[D]. Dublin: Trinity College, University of Dublin, 2004.
[9]	DOWLINGJ , CAHILLV . The K-component architecture meta-model for self-adaptive software[A]. Proc of the Int'l Conf on Meta level Ar-chitectures and Separation of Crosscutting Concerns[C]. Kyoto, Japan, 2001. 81-88.
[10]	PASPALLISN , PAPADOPOULOSG A . An approach for developing adaptive, mobile applications with separation of concerns[A]. Proc of the 30th Annual Int'l Computer Software and Applications Conf (COMPSAC)[C]. Chicago, USA, 2006. 299-306.
[11]	OREIZYP , GORLICKM M , TAYLORR N , et al. An architec-ture-based approach to self-adaptive software[J]. IEEE Intelligent Systems, 1999,14(3): 54-62.
[12]	GARLAND , CHENGS W , HUANGA C , et al. Rainbow:architec-ture-based self-adaptation with reusable infrastructure[J]. IEEE Com-puter, 2004,37(10): 46-54.
[13]	MOREIRAR , BLAIRG , CARRAPATOSOE . FORMAware: frame-work of reflective components for managing architecture adapta-tion[A]. Proc of the 3rd Int'l Workshop on Software Engineering and Middleware[C]. Orlando, USA, 2002.
[14]	BRUNETONE , COUPAYET , STEFANIJ B . Recursive and dynamic software composition with sharing[A]. Proc of the 7th Int'l Workshop on Component-Oriented Programming (WCOP)[C]. Malaga, Spain, 2002.
[15]	YANGF Q , LVJ , MEIH , . Technical framework for Internetware: an architecture centric approach[J]. Science in China (Series E), 2008,38(6): 818-828.
[16]	MEIH , HUANGG , ZHAOH Y , et al. A software architecture centric engineering approach for Internetware[J]. Science in China (Series E), 2006,36(10): 1100-1126.
[17]	LUJ , MAX X , TAOX P , et al. On environment-driven software model for internetware[J]. Science in China (Series E), 2008,38(6): 864-900.
[18]	VMware, Inc VMware virtual machine technology[EB/OL]. , 2006.
[19]	GARFINKELT , PFAFFB , CHOWJ , et al. Terra: a virtual ma-chine-based platform for trusted computing[A]. Proceedings of the 19th ACM Symposium on Operating Systems Principles (SOSP'03)[C]. New York, USA, 2003. 193-206.
[20]	KARGERP A . Multi-level security requirements for hypervisors[A]. Proceedings of the 21st Annual Computer Security Applications Con-ference (ACSAC'05)[C]. Tucson, Arizona, USA, 2005. 267-275.
[21]	JAEGERT , SAILERR , SREENIVASANY . Managing the risk of covert information flows in virtual machine systems[A]. Proceedings of the 12th ACM Symposium on Access Control Models and Tech-nologies (SACMAT'07)[C]. Sophia Antipolis,France, 2007. 81-90.
[22]	CABUKS , DALTONC I , RAMASAMYH G , et al. Towards auto-mated provisioning of secure virtualized networks[A]. Proceedings of the 14th ACM Conference on Computer and Communications Security (CCS'07)[C]. Alexandria, VA, USA, 2007. 235-245.
[23]	STEFANB , RAMONC , KENNETHA G , et al. vTPM: virtualizing the trusted platform module[A]. Proceedings of 15th USENIX Securi-ty Symposium[C]. Vancouver, Canada, 2006. 305-320.
[24]	MELVINJ A , MICHAM , CHRISI D . Towards trustworthy virtuali-zation environments: Xen library OS security service i frastruc-ture[EB/OL]. , 2007.
[25]	杨芙清, 梅宏, 李克勤 . 软件复用与软件构件技术[J]. 电子学报， 1999,27(2): 68-75. YANGF Q , MEIH , LIK Q . Software reuse and software component technology[J]. Acta Electronica Sinica, 1999,27(2): 68-75.
[26]	QUAGGA guide[EB/OL]. .
[27]	RIS raw data[EB/OL]. .