【作者】 李俊；

【导师】 贺小箭； 于贵桃；

【作者基本信息】 华南理工大学 ， 计算机技术， 2015， 硕士

【摘要】 随着公司信息化建设的进一步推进,信息系统的不断增加,对公司信息系统安全保障的要求不断提高,目前对公司外部安全防护有防火墙、入侵检测系统、反垃圾邮件系统等,但对公司内部网络准入制度、网络实名制、终端网络流量管理等无法满足需求,为保证公司内部的信息安全,需要建设企业信息安全系统的相关软件设备和相应的服务。本课题针对作者单位所面临的信息安全现状,结合市面上桌面终端安全管理系统产品的特点,进一步设计与开发适用于本单位的终端安全管理系统。系统采用DNS重定向的准入控制,主动探测,补丁的发现及升级,移动存储管理、客户端状态管理等技术,遵循网络防护和客户端双重防护的理念,就网络安全管理人员在客户端管理及网络管理工作当中所遇到的各种问题提出有效的解决方案,对客户端进行全方位的管理与控制。通过本系统有效的遏制了客户端的违规接入的情况,杜绝乱拉乱接设备;强制对客户端进行补丁分发或安装,减少了系统漏洞;加强管控移动存储,保证了移动存储的数据安全;监控客户端状态,随时为企业员工提供优质IT服务。更多还原

【Abstract】 With the further advancement of information construction, the increasing of information systems, information systems of the company safety requirements continue to increase, the firewall and intrusion detection system, anti spam system on the company’s external security, but can not meet the demand of the system, access to the internal network, network real name system, terminal network traffic management. For information security within a Surety Company, to information security system construction of enterprise software related equipment and the corresponding service.Information security status of the subject facing the market, combined with the characteristics of desktop security management system products, further design and development of terminal security management system applicable to the unit. The system uses DNS to redirect the access control, active exploration, discovery and upgrade patch, mobile storage management, client management technology, network protection and the protection of both the client to follow the idea, in view of the network security management in network management, client management problems faced in the process of providing solutions to strengthen the comprehensive management control to the client.Through this system to effectively curb illegal access client situation, put an end to pull equipment; on the client patch distribution or installation, reducing the loopholes in the system; strengthen the management and control of mobile storage, to ensure the mobile storage data security; monitoring client state, at any time to provide quality IT services for employees.更多还原