现代化钢铁企业网络安全管理体系的建设

CONSTRUCTION OF MODERN STEEL ENTERPRISE NETWORK SECURITY MANAGEMENT SYSTEM

随着智能制造建设的不断深入,现代化钢铁企业信息化、自动化的网络规模、应用系统和终端数量都在大幅增加,给网络安全管理工作带来了极大挑战。而防火墙、杀毒软件等传统网络安全技术属于被动防御,不仅耗费人力,而且网络威胁发现和处理不及时,已经不能满足日益严峻的网络安全形势要求。着眼于企业网络架构及安全的实际需求,本着“事前预防”、“事中保护”、“事后审计”的原则,利用虚拟专用网(VPN)技术、防火墙技术、入侵检测和网络信息安全动态感知技术、防病毒技术、防DOS/DDOS攻击技术手段,开发了适用于现代化钢铁企业的网络安全系统。通过优化设计互联网出口区、数据中心区、运维管理区、DMZ区、专网接入区和主干网络区,使工业网络和信息化网络全网贯通和统一,实现了对无线网络进行全方位的监控和管理。

With the deepening of intelligent manufacturing construction,the network scale,application systems and terminals of modern steel enterprises are increasing significantly,which brings great challenges to network security management.Traditional network security technologies such as firewalls and antivirus software are passive defenses,which not only consume manpower,but also do not detect and deal with network threats in a timely manner,which can no longer meet the requirements of the increasingly severe network security situation.Focusing on the actual needs of enterprise network architecture and security,in line with the principles of"pre-prevention","in-event protection"and"post-audit",the network security system suitable for modern steel enterprises has been developed by using virtual private network(VPN)technology,firewall technology,intrusion detection and network information security dynamic perception technology,anti-virus technology,and anti-DOS/DDOS attack technology.Through the optimization and design of Internet egress area,data center area,operation and maintenance management area,DMZ area,private network access area and backbone network area,the industrial network and information network are connected and unified throughout the network,and the wireless network is monitored and managed in an all-round way.