介绍了主动网络安全系统的假设模型和威胁模型.基于上述模型和主动网络的安全需要提出了一种安全系统结构模型.该安全模型包括授权、认证、完整性检查和加密等.使用加密和数字签名方法来保护主动网络报文的完整性,使用授权和政策来阻止非法访问以及主动节点的资源请求和行为. An assumptions model and a threat model of proactive network security system are introduced.A security architecture model is proposed based on the above models and the security requirements of active networks.This security model includes authorization, authentication, integrity checking and encryption, etc. Using encryption and number Signature method to protect the integrity of the active network message, the use of authorization and policy to prevent illegal access and active node resource requests and behavior.