Abstract

Due to its open protocol, the Internet has revolutionized computer networks, but this revolution brings new risks and threats. The best way to protect computer networks is to prevent attackers from intruding, using fast automated procedures. However, the current state of protection is insufficient, because providing for all attacks or preventing unknown types of attack is almost impossible, and the methods used are manual. We solve this problem by using active security management, based on sharing information about attacks and cooperation between organizations. Secure Zone Cooperation, a framework that establishes mutual collaboration and cooperation between trusted zones, can protect systems and networks from potential attacks. This framework can predict and respond to attacks by exchanging security information and cooperating with each zone. It is a dynamic, powerful security architecture that rapidly enables security policy to be updated and response modules to be deployed.

Author Keywords: Security management; Active network; Secure Zone Cooperation

Article Outline

1. Introduction

2. Background

3. Secure zone

4. Security alert level

5. Cooperation and policy

6. Experimental results and analysis

6.1. Experimental testbed

6.2. DDoS attack and response scenario

6.3. Result analysis

6.4. Generalization of protection

7. Conclusions

References

Vitae