基于校园网的网络安全体系结构研究与设计

【作者】 王瑾；

【导师】 宋斌； 顾军；

【作者基本信息】 南京理工大学 ， 计算机技术， 2007， 硕士

【摘要】 随着计算机网络技术的广泛应用,网络安全问题已不容忽视,作为一个面向大众的开放系统,计算机网络面临着来自各方面的威胁和攻击。因此,网络安全系统的构建是一个非常重要的问题。高校校园网的安全是一个庞大的系统工程,需要全方位防范。防范不仅是被动的,更要主动进行,只有这样,才能取得主动权,使网络避免有意无意的攻击。根据高校校园网安全系统的需求,针对淮海工学院校园网建设的需要,给出了校园网络安全解决方案,其中采用虚拟局域网技术和建立ACL列表控制保障整个网络的运行;运用防火墙技术作为该校园网的基本安全保障;身份认证系统负责用户的认证,授权和计费,数据采集、实时控制和执行各种网络和计费策略,保障网络行为的规范性和系统的安全性。安全体系结构在淮海工学院的校园网内实施的结果表明,虚拟局域网的划分和ACL列表能将校园网的风险降到最低,保护VLAN的安全,防火墙系统能够有效地实现校园网络系统与外界的安全隔离,保护校内的关键信息资产和网络组件,不影响网络系统的工作效率。通过身份认证系统建立起的网络行为管理体系能够规范用户的网络行为。针对校园网经常遭受的攻击对安全系统的性能进行了测试,并对系统的实现进行了分析。最后,在总结全文的基础上对计算机网络安全进行展望。更多还原

【Abstract】 Following the abroad application of computer internet technology, the security of internet is more important, as an opening system facing the people, computer internet is facing with the threaten and attack from different areas. So, building up the security system is a very important problem. The security of university’s campus network is a huge system engineering, need keeping a lookout omni-directionally. It is not only passive to take precautions against, it only in this way, could obtain the initiative to go on voluntarily even more, make the network avoid the attack consciously or unconsciously.Based on the need of campus security system, aimed at the need of campus construction for Huaihai Institute of Technology, this paper provided the solving method for campus internet security, including virtual LANs technology and ACL to control and guarantee the operating system of the internet; firewalls technology as the basic security system of the campus internet; identification system as the users’ identification, authorization and charge. Data collection, real-time control and the implementation of various internet charge strategies can guarantee the security of the system and standardize the internet conduction.The result of the actualization of this kind of system in Huaihai Institute of Technology digital campus indicates that firewalls could realize the security insulation between campus internet system and the outside, protect the campus essential information assets and internet groupware without affecting the system working efficiency. The building up of the internet conduction management system through identification system can standardize the users’ behavior. The attack that is often suffered to campus network has tested the performance of the security system, and has analyzed the realization of the system.Finally, look forward to the online security of the computer on the basis of summarizing the full text.更多还原