【作者】 张健；

【导师】 周安民； 张贵明；

【作者基本信息】 四川大学 ， 电子与通信工程， 2005， 硕士

【摘要】 四川师范大学(以下简称:川师大)利用先进的计算机技术和网络通信技术,已初步建立了较为完善的信息系统,实现校园内计算机联网、信息资源共享,开发了多个基于B/S和C/S业务系统应用,其网络系统升级改造的主要任务是建立完善的安全体系。 论文对概述了川师大校园网现状,从物理层、链路层、网络层、应用层、操作系统的脆弱性和管理共六个方面分析了系统面临的风险,提出了系统的安全需求和系统安全建设目标,在此基础上,设计了校园网安全方案。安全方案从四个方面满足系统的安全需求:物理安全;通过隔离与访问控制、保障网络传输安全和网络入侵检测三个方面构建网络安全保障框架;从提升操作系统安全、提供数据备份与灾难恢复、系统全方位病毒防范、专用业务子网主机资源监控与审计几个方面构建业务应用系统安全框架。最后,给出了如何分步骤的实现该安全方案。 该方案已在川师大校园网得到部分实施,结果表明,该方案设计合理,能满足校园网的安全需求。更多还原

【Abstract】 An information system in Sichuan normal university has been built for computer connection and information sharing in campus based on the advanced technology of computer and communication, and some transaction application system based on B/S and C/S has exploited .The primary task of the updating the information system is building a perfect security structure.The author introduces the components and structure of the information system, analyzes the security risk of the information system related to the physical layer, data link layer, network layer, application layer, the leaks of operating system and management , proposes the security requirement and security goal of the information system .and designs the security plan. This security plan satisfies the security requirement on three aspects. .First ,the security plan satisfies the need of physical security . Second ,a security assurance technical framework has been established based on isolation and access control 、 security assurance of network transportation and intrusion detection system .Finally, a security assurance framework of transaction application system has been established through improving the security of operation system, providing data-backup and disaster-recovery, offering virus detection and supporting monitoring and audit the resource of transaction sub-network .The author gives a scheme for how to implement the security plan gradually.The security plan has been implemented in the network of Sichuan normal university. The network operation shows that the security plan designed is reasonable ,and accords well with the requirement of security.更多还原