Abstract: This paper presents a civil aviation network self-protection mode1. The model's system structure and the layered response framework of this system model were designed. The role based access control policy and the agent based communication security mechanism of this system were proposed. Experimental results demonstrate that access control policy and communication mechanism of this system's model can effectively protect data security.