基于网络系统的安全设计研究综述

A Survey of Network System-Based Security Design

近年来随着党和国家对网络安全的不断重视,对各类网络的安全不断提出新的要求.针对网络系统安全方面,本文以某企业的网络系统为研究对象,对其开展针对企业网络系统的安全升级研究和分析.针对企业原有网络系统的粗放管理、策略控制简单、主机防护不全、应用系统曾遭受攻击等问题,通过立项申请对企业网络系统的升级改造项目,提升企业网络系统安全性.通过在制度体系层面按照等保要求,完成了相关制度的编制、宣贯;网络层面启用了DHCP及802.1x认证,细化了ACL、补充了网络安全设备、重新规划了防火墙安全域并调整了相关的应用系统部署位置;主机层面安装了杀毒软件、行为审计等主机防护工具;应用系统补充了抗DDOS设备.通过一系列措施,加强了网络安全,解决了企业原有的安全问题.网络的安全性及其实施方法是网络规划的关键任务之一,为了保障网络的安全性和信息的安全性,各种网络安全技术和安全产品得到了广泛使用.

In recent years,with the party and the country's continuous attention to network security,the security of all kinds of network constantly put forward new requirements.In terms of network system security,this paper takes the network system of an enterprise as the research object and carries out research and analysis on the security upgrade of the network system for the enterprise.In view of the problems of extensive management,simple policy control,incomplete host protection,and attacks on the application system of the original network system of the enterprise,the project is applied for upgrading the enterprise network system to improve the security of the enterprise network system.Through the system level in accordance with the requirements of equal protection,to complete the compilation of relevant systems,publicity and implementation;DHCP and 802.1x authentication are enabled on the network layer,ACL is refined,network security devices are supplemented,firewall security domains are replanned,and application system deployment positions are adjusted.Host defense tools such as antivirus software and behavior audit are installed on the host layer.The application system is supplemented with anti-ddos devices.Through a series of measures,strengthen the network security,solve the original security problems of enterprises.Network security and its implementation is one of the key tasks in network planning.In order to ensure network security and information security,various network security technologies and security products have been widely used.