目前网络安全防护的一般措施是在受保护主机上安装防火墙、使用入侵检测机制和在网络设备如交换机、路由器上设置访问控制等技术。本文针在研究内部网的安全问题上,对主机强制访问控制监控子系统进行深入研究。 At present, the general measures of network security protection are to install a firewall on a protected host, use an intrusion detection mechanism, and set access control technologies on network devices such as switches and routers. In this paper, we study on the security of intranet and conduct an in-depth research on the host-based mandatory access control and monitoring subsystem.