Research about solution for network security based on security domain

The typical security solution can only ensure the security of the network boundary, but not involve the internal security. According to different types of applications and secrets that it provides, the network can be divided into a number of logical security domains. Furthermore, the access control of the network could be realized by applying dynamical VLAN technology, and the filtration and audit of the information exchange between security domains is realized by mandatory access control policies, and the unified identity authentication and access control is realized by applying SSL VPN technology. The practical application shows that the solution can not only enforce the access control and secure audit, but also reduce the risk of revealing the secret information.