三平方公里数字园区安全策略

Security Policy for Tree Square Kilometers Digital Campus

通过对三平方公里的大学园区的网络结构和安全状况的实例分析,研究和讨论了中小型数字园区的安全策略,在实例和技术分析中了解到掌握一般的网络攻击形态及行为模式是网络安全防范的基础。地址解析协议(Address Resolution Protocol,ARP)欺骗报文或称为一类病毒或称为一种技术,攻防两端都有泛滥之势,文中的讨论与建议旨在降低管理成本,从管理的角度审视园区的数字网络安全。除了对技术的探讨,还提出了一些非技术因素,希望引起读者的重视,从而将数字网络安全工作引入更深的层次。

Based on the three square kilometers of the University campus network architecture and examples of security analysis,the security policies for small and medium-sized university campuses are studied and discussed.The general forms of network attack and behavior patterns are mastered in the example and technical analysis,these are regarded as the foundation of network security and protection.ARP spoofing packets,as a class of viruses or as a technology,spread unchecked both at offensive and defensive ends.The discussions and suggestions in this paper aim to reduce administrative costs,and from the management perspective,investigate the campus network security.This paper also proposes some non-technical factors,thus to arouse the readers＇ attention and lead the digital network security to a deeper level.