面向工业控制网络环境的高安全级别信息系统网络,结合物理网闸和虚拟防火墙的思想,提出一种基于Xen共享内存的高效虚拟化多级网络安全互联机制,依照信息系统安全需求与不同的应用业务需求,企业可以使用不同安全策略的虚拟机模版,利用虚拟机间共享内存机制模拟物理网闸的专用传输介质,从而提升安全隔离性能,并能够保证较高的安全性。为网闸的发展提供了新的思路。 Aiming at the high security level information system network for industrial control network environment, this paper proposes an efficient virtualization multi-level network security interconnection mechanism based on Xen shared memory, which is based on the idea of ​​physical gatekeeper and virtual firewall. According to the requirements of information system security and different applications Business needs, enterprises can use different security policy template of the virtual machine, the use of virtual machines shared memory mechanism to simulate the physical gatekeeper dedicated transmission media, thereby enhancing the safety isolation performance, and to ensure high security. For the development of the gatekeeper provides a new way of thinking.