一个关于企业管理信息系统的安全策略和安全技术

The Security Strategy and Security Controls and Techniques for the Enterprise Management Information System

介绍一个基于ＵＮＩＸ／ＯＲＡＣＬＥ的企业管理信息系统所采用的安全策略、安全控制与技术及其在系统中的实现方法。其安全控制是通过分层分级来实现的，特别是面向最终用户的应用层，应用软件有其自身的安全控制机制。特别强调安全教育与管理是安全系统的一个重要方面。

This paper attempts to present the security strategy and the security control and its implementation via the hierarchy of securitics used in an enterprise management information system based on unix and oracle. It describes the useful and critical techniques applied to every level of the hierarchy of securities,espcially the security control mechanism built in the applications. It also stresses and explains the impohance of the safety education and management.