校园网络安全运行架构研究

Research on campus network secure architecture

校园网络具有的联网设备品牌多、用户数量大、用户可控性差、安全事件发生频繁等特点,大大增加了网络管理的复杂性。从用户接入控制、网络运行状态监测、安全事件追查和策略控制等方面入手,提出了一个保障校园网络安全运行的架构,并已应用于网络管理中,提高了网络管理效率,增强了校园网络的可用性和可控性。

The campus network has many characteristics, such as the diversity of network equipments＇ brand, the mass of the customer quantity, and the poor controllability of customers＇ behavior and the high frequency of security affairs, which consumedly increases the complexity of network management. An architecture is put forward, which guarantees the safe movement of the campus network based on customer＇s connection controlling, network statement inspecting, secure affairs tracing and policy deploying, and already applied in the network management, raised the network management efficiency, strengthened the campus network usability and controllability.