英语翻译
POLICY
Figure 3 shows the Georgia Tech campusnetwork policy in terms of a state machine model.The policy can be expressedelegantly with events and transitions among different states.User devices inunauthenticated state cannot access the network.Successful authentication withcredentials (username and password) moves a device to scanning state,whereonly traffic between the vulnerability scanner is allowed.After no knownvulnerabilities are found,a device can transition to the authentication statewhere the device is finally granted full access to the network.Any infectionevent from an intrusion detection system can move the device state to limited,where access to the network and Internet access are blocked.After five hoursof inactivity,the user is required to authenticate again.