【作者】 王青；

【导师】 刘嘉勇； 华希超；

【作者基本信息】 四川大学 ， 电子与通信工程， 2006， 硕士

【摘要】 ××市的公积金管理中心与所辖的七个区县下级单位的网络以租用电信的专用线路为平台，形成跨地域的广域网络。现打算采用费用低廉的宽带接入技术，通过网络安全技术对这种应用进行安全加固，从而提高数据传输的效率和安全性。 本课题在分析××市的公积金管理系统现有网络及应用现状的基础上，总结出网络的软件、硬件、数据及应用资源，并针对公积金系统的特殊情况，分类分析了系统面临的环境风险、系统风险、运行风险、用户风险等，在此基础上，依据OSI七层协议相关的安全体系，提出了以VPN技术、防火墙技术、入侵检测技术、防病毒技术及备份技术为核心的完整的安全解决方案。在该方案中，还包含了完善的管理措施，形成了技术和管理相互协调配合的有效的安全方案，该方案的设计可保证数据安全传输，并有效节省用户开支。方案已分步投入实施，取得了初步的效果。更多还原

【Abstract】 There has existed a widely area-covered LAN system, which rents from CHINA TELECOM as an exclusive tie line with the centre of public housing accumulation fund (CHPAF) in Shaoxin, together with its seven ruled administrative districts and counties. This network transmission system is to be highly expected to make it much more efficient and far more secure by means of using lower cost broadband cut-in technique and taking network safety measures.The thesis analyses the practical application of the line available on the base of LAN system for CHPAF. It also analyzes the risks of the conditions of machine rooms, application platforms as well as service systems. The thesis leads in technology of VPN and Intrusion detection on line, which is to be widely applied in future. The essay puts forward an improvable program for the network of safety of CPAFHC, which maps out an overall design for making the network further reinforced with less expenditure for users.更多还原