校园网络安全工程的实践与研究

【作者】 周宇；

【导师】 刘献忠；

【作者基本信息】 华东师范大学 ， 软件工程， 2007， 硕士

【摘要】 随着互联网的普及和国内各高校网络建设的不断发展，目前高校大多建立了校园网，它已经成为高校信息化的重要组成部分。但随着黑客的入侵增多及网络病毒的泛滥，校园网的安全已成为不容忽视的问题，如何在开放网络环境中保证系统的安全性已经成为十分迫切的问题。网络安全系统的构建是一个非常重要的课题，它涉及到从系统硬件到软件，从单机到网络的各个方面。本文系统地介绍了网络安全的概念、讨论了校园网面临的各种安全威胁、网络的系统风险分析；针对校园网的安全系统的建设目标，提出了网络系统的安全体系架构和具体解决方案。该方案从物理安全、访问控制、病毒防护和安全管理等方面对校园网络安全解决方案进行了分类研究；并结合井冈山学院校园网的实际情况，根据现有网络设备条件，运用VLAN技术、NAT技术、路由器访问列表以及采用了PPPOE拨号方式实现对校园网的基本安全防护。该方案在井冈山学院校园网实施后，结果表明，该方案设计合理，能基本满足校园网的安全需求。更多还原

【Abstract】 With the popularization of internet and the development of domestic universities network construction, the campus network has been mostly established, which nowadays has became the important component of university information. However, with the increase of hacker’s invasion and the overflow of network virus, the security of campus network" has become the intractable question. Therefore, it is" urgent to maintain the system’s security in the opening network. The construction of network security system is a quite significant subject which involves various aspects: from hardware to software, from PC to network. This thesis systematically introduces the concept of network security, discusses various threats to security of campus network, analyzes network system security, and proposes the architecture and solution of network system security according to its construction targets. This thesis also conducts the research to the campus network security solution, such as physical security, access control, viral protection, security management. According to the existing network equipment, we apply the VLAN technology, the NAT technology, the access control lists of a router, and the PPPOE digit dialing method to realize the safety protection on campus network of Jinggangshan College.We had implemented the solution in campus network of Jinggangshan College. The result shows that the solution is well-designed and can satisfy requirements of campus network security.更多还原