关于现有双网隔离计算机安全隐患的分析及应对措施

Analysis and Solution Against Security Issue of Existing Computer with Dual-network

以隔离卡为代表的现有双网隔离计算机由于架构本身的缺陷,存在严重的安全和泄密隐患,继续应用在要求较高的重要机构,必然会对信息安全造成重大威胁。针对其安全隐患,文章提出了一种完全物理隔离,双主机独立工作的双网计算机架构,并建议了一些安全计算机必备的安全防护功能,如指纹识别加电(注)、适时人脸比对验证、内外网网口异型化设计、数据的单向传递、被盗后数据自毁等。通过这些方法有效地提高了计算机终端的安全等级。

Based on architecture of isolation card, there are severe security vulnerabilities in existing secure computer with dual-network, which may cause fatal threats to some important organization with high security requirement. To cope with above threats, we propose a highly secure computer using dual-network physical isolation together with independent dual-host. We also propose some necessary protection features such as power-on with fingerpdnt recognition, timely face verification, differentiated interface between internal and external network, one-way data transfer, data self-destruct. Security of computer is ensured by above methods.