一种基于双单向传输通道的网络隔离方案

摘要

针对现有网络隔离技术中存在数据传输完整性不能保证、高密级网系统安全性有待提高等问题，文章提出一种基于双单向传输通道的网络隔离方案。该方案采用双FIFO存储器，将网络隔离与虚拟机机制结合起来，有效提高了数据传输速率，避免了存储操作时造成的数据丢失，提升了高密级网的安全性能。%In view of the problem that existing network isolation technology can’t guarantee the data integrity and the security of the high level secret network system, this paper proposes a network isolation scheme based on double unidirectional transmission channnel, which uses the double FIFO memory, and combines the network isolation with the mechanism of the virtual machine. The scheme improves the speed of data transmission, avoides the problem of loss of data when the store operation occurs and improves the safety performance of the high level secret network.