强制访问控制是实现计算机安全的一种常用手段。IPSec协议作为IETF提出的Internet安全协议标准,为IPv4和IPv6协议提供强大的、灵活的,基于加密体制的安全方案。通过执行网络相关操作的强制访问控制策略,并根据IPSec协议对网络通信执行强制加密策略,从而构造具有广泛适应性的网络安全体系结构模型。 Forced access control is a common means of achieving computer security. As the Internet security protocol standard proposed by IETF, IPSec protocol provides a powerful and flexible security scheme based on encryption scheme for IPv4 and IPv6 protocols. By constructing a mandatory access control policy based on network operations and enforcing a mandatory encryption strategy for network traffic according to IPSec protocol, a widely adaptable network security architecture model is constructed.