网上办公系统安全体系研究与应用

【作者】 邱晓峰；

【导师】 秦志光； 万里；

【作者基本信息】 电子科技大学 ， 软件工程， 2008， 硕士

【摘要】 随着科技的发展,人类社会迈入了一个崭新的信息时代。在社会信息化的不断推进过程中,各单位的办公自动化需求也在不断升级。网上办公应用的扩大,也带来了诸多的网络信息安全威胁。网络环境的复杂性、多变性以及信息系统的脆弱性,决定了网络安全威胁的客观存在。网络安全建设已经成为企业可持续发展的重大问题。本文结合一个网络安全建设的实例,重点研究网上办公系统的网络安全问题。在对该网络系统详细的需求分析基础上,依照计算机网络安全设计目标和计算机网络安全系统的总体规划,从物理层安全、网络平台安全、软件平台安全、应用层安全、网络病毒防护等方面出发,对计算机的网络安全问题进行全面分析,并依据分析的结果,设计了该网络系统的安全方案。方案运用先进的网络安全技术,提出了包括物理隔离、桌面系统安全、病毒防护、身份鉴别、访问控制、信息加密、信息完整性校验、VPN、抗抵赖、安全审计、入侵检测、漏洞扫描、SMS(系统管理套件)应用、安全保密管理等安全技术和管理措施在内的一整套解决方法。目的是建立一个完整的、立体的、多层次的网络安全防御体系。该构架从总体上实现了网上办公系统安全上的分层保护,整个安全构架层层相扣、紧密结合,并满足了系统的安全性要求。该安全构架被应用到泸州市移动公司网上办公系统中,效果较好,为企事业信息系统的安全生产提供了可参考的模式。同时,在本文的最后给出了系统运行的情况和结论,供以后借鉴。更多还原

【Abstract】 Along with the development of science and technology,human society has entered a new information age.In the continuous development of the information society in the course,the units of office automation needs are continually escalating. The expansion of online office applications,it also brings a lot of network information security threats.The complexity of the network environment,variability and the vulnerability of information systems,the network decided the objective existence of security threats.The building of network security has become a major issue of sustainable development.In this paper,an example of the building of network security,the focus on online office systems network security issues.In the network detailed needs analysis based on computer network security in accordance with the objectives and design of computer network security system in the general planning of the physical layer security,network security platform,the software platform security,application layer security,network anti-virus protection and other aspects of,on the computer network security issues of a comprehensive analysis and,in accordance with the result of the analysis,design of the network system security programmes.Programmes to apply advanced network security technology,including the physical isolation,desktop system security,virus protection, identification,access control,message encryption,message integrity check,anti-denial, security auditing,intrusion detection,vulnerability scanning,system management suite,security management,and other security technologies and management measures, a set of solutions,aimed at creating a complete,three-dimensional,multi-level network security defense system.The framework achieved the overall online office of the layered security system to protect the entire security framework layers of interlocking,the close integration of the system and to meet the security requirements.The security framework was applied to the mobile Internet Luzhou City office system,the result is better for the security of enterprise information systems can provide production reference model.At the same time,this is the final trial operation of the system and conclusions for future reference.更多还原