【作者】 魏斐翡；

【导师】 王虎；

【作者基本信息】 武汉理工大学 ， 管理科学与工程， 2004， 硕士

【摘要】 现在的社会是个信息化的社会，信息在各个方面都起到重要的作用。在企业的发展方面，信息显得尤为重要，企业的信息化无疑可以通过各方面的具体作用以提高企业的竞争力，已经成为不可阻挡的趋势。为实现企业的全面信息化，首先必须实现企业管理的信息化，因此，建立科学合理、告诉有效的管理信息系统一直是企业管理学研究的热门话题。 随着信息技术迅速发展，出现了一种管理信息系统的运作模式IIMIS，它是Internet/Intranet与传统MIS的有机结合。IIMIS在提高企业管理水平、提高企业竞争力的同时，也由于系统的开放模式，带来了很多的安全隐患；因此，要保证管理信息系统在新模式下的良好运行，必须针对各类安全问题指定相应的安全策略。 本文从管理信息系统的定义和结构出发，简要的回顾了信息系统的发展历程并提出在管理信息系统快速的发展发展趋势下，其安全问题显得尤为重要。 本文从计算机安全学的角度，以现代MIS的逻辑结构为基础，简要的分析了MIS的威胁和风险因素，在此基础上给出了现代MIS的安全机制和结构模型，同时回顾了目前国内外对信息系统安全策略研究的成果。 本文讨论了IIMIS的结构模型，并阐述了IIMIS的功能，指出IIMIS是一种分布式、集成化的全方位信息服务系统。同时，文章讨论了IIMIS的实现技术，着重分析了Web数据库访问技术和分布式计算技术。 本文从IIMIS的结构出发，从Intranet内部和与Internet连接两方面，分析了系统中的主要安全隐患；提出了防火墙技术、用户身份验证和授权控制、强制登陆机制和两层认证、数据保密等安全机制，并结合ASP技术详细介绍了以上各安全机制实现。 本文以KY药业公司基于Internet／Intranet的销售管理信息系统作为案例，介绍了基于Internet／Intranet管理信息系统极其安全机制在实践中的应用与实现。 信息时代建立信息系统的安全体系对任何一个企业来讲有着至关重要的战略意义。信息系统安全一个永久性的问题，只有通过不断的改进和完善安全手段，才能保证系统的正常运行，才能提高系统的可靠性。更多还原

【Abstract】 Information shows important function in modern society, which is information one, especially in the development of enterprises. Enterprise information will undoubtedly improve its competitive power through different concrete actions. To make enterprise fully informationization, the first thing is to make management informationization. So to set up an effective management information system is the direction for seeks.With the development of information technology, a new mode of management information system called IIMIS has arisen. It combines Internet/Intranet and traditional MIS.IIMIS has improved the management and competitive ability of enterprises, however, for the sake of its open mode it also cause much hidden trouble to the security of the system. Therefore, in order to maintain good function of MIS in the new mood, security strategies that are corresponding with all kinds of security problems must be set down.This paper begins with the definition and structure of MIS, briefly reviews the process of MIS and shows the importance of its security problems in its fast-developing trend.This Paper briefly analyzes menace and hazard of MIS with the base point of study for computer security and the logic structure of modern MIS, gives the security mechanism and structure model of modern MIS. At the same time, it reviews research production on MIS security strategy at home and abroad.This Paper discusses the structure model of IIMIS and described its functions, pointing out that IIMIS is a kind of distributing and compositive omnidirectional information service system. At the same time, it discusses the practice technology of IIMIS and emphasizes on the accessing technology of Web database and distributing calculating technology.Based on the structure of IIMIS, this paper analyzes main hidden trouble of the two aspects of system: one is interior of Intranet and the other is connection of system and Internet. It also provides some security mechanism: firewall, user identity authentication and authorization control, compelling landing and two-layer authentication, data secrecy and so on, which are introduced in details with ASP.The example case is KY medicine sale MIS based on Internet/Intranet, introducing the practice and application of IIMIS and its security mechanism.To set up security mechanism of MIS has very important sense to every enterprise of information age. Information security is a perpetual problem. Perpetual mending and consummating is the only method to ensure natural function and improve dependability of the system.更多还原