脆弱性安全vs結構性安全-安全與可信security(編輯修改稿)
2025-03-10 22:03 本頁面
【文章內容簡介】 ive Trust”, is a process where the Root of Trust gives a trustworthy description of a second group of functions. 18一個包含 TPM的 PCReference PC platform containing a TCG TPM19TCG – 可信平臺模塊TCG – Trusted Platform Module (TPM)? 一個可信平臺常常擁有三個可信根There are monly three Roots of Trust in a trusted platform– 測量可信根 root of trust for measurement (RTM)– 存儲可信根 root of trust for storage (RTS) – 報告可信根 root of trust for reporting (RTR)20證明協(xié)議和消息交換Attestation protocol and message exchange21TPM – 存儲可信根的體系結構TPM – Root of Trust for Storage (RTS)22TPM 部件體系結構TPM ponent architecture23TCG 軟件分層TCG software layering24可信平臺的生命周期The trusted platform lifecycle25可信平臺上的用戶認證User authentication using trusted platforms 26可信平臺上的用戶認證User authentication using trusted platforms27經典的四角模型The classical four corners model28四角模型的可信平臺實現(xiàn)Detailed TP deployment architecture29TCG對于可信計算平臺的劃分8 categories of Trusted platform體系結構體系結構 ArchitectureTPM移動設備移動設備 Mobile 客戶端客戶端 PC Client服務器服務器 Server軟件包軟件包Software Stack存儲存儲 Storage可信網絡連接可信網絡連接Trusted Network Connect30TCG的 IWG和 TNC的對應關系the IWG and TNC architecture31TNC體系結構TNC architecture32TNC體系結構下的消息流Message flow between ponents33擁有 TPM的 TNC體系結構The TNC architecture with the TPM34思科的自防御網絡體系Cisco’s selfdefending work35思科的自防御網絡體系Cisco’s selfdefending work36松散安全結構的代表 —— 框架和方案Loose security structure — Framework? 松散結構中的各個部件關聯(lián)關系，常?？咳说募蓙韺崿F(xiàn)The connection among the ponents of loose structure is always integrated by human.? 松散結構常常表現(xiàn)為框架 Framework– 技術框架 Technology framework– 管理體系 Management system? ISO27001, ISO20230, etc.3738技術功能是 PDR的衍生PDR can express technology framework39檢測能力是松散技術結構的關聯(lián)要素Detection make the loose structure tight? 攻擊者不得不面對越來越多的Attackers have to face more– 入侵檢測 IDS– 漏洞掃描 scanner– 應用審計系統(tǒng) Application auditing system– 日志系統(tǒng) log system– 蜜罐 honey pot– 取證系統(tǒng) forensic system– 監(jiān)控平臺 monitoring platform– 等等 etc.40一個信息安全管理體系的結構Structure of a ISMS (modified ISO27001)41結
教學課件相關推薦
鄂ICP備17016276號-1