中国科学院院所网络终端安全防护系统的设计与实现

Design and lmplementation of the Intranet Terminal Security Protection System for Chinese Academy of Sciences

随着互联网的快速发展,网络安全事件愈演愈烈,中国科学院院所网络也面临着各种各样的安全威胁。为了保障中国科学院网络终端的安全,本文给出了一个网络终端安全防护系统的设计方案,对中国科学院院所网络中的计算机终端实施包括安全配置、漏洞修复、病毒查杀等在内的全方位安全保护。系统分为客户端和服务器端两个部分,不仅普通用户可以通过系统的客户端对自己的计算机进行安全检测与修复,而且管理员也可以通过服务器端对客户端计算机进行安全管理。通过对系统的实际部署测试,验证了其保护网络终端安全的有效性。

With the rapid development of the Intemet, network security events are becoming more and more common. The intranet of Chinese Academy of Sciences is also facing with various security threats. To protect thesecurity of the intranet terminals of Chinese Academy of Sciences, we present a design scheme of security protection system in this paper. It implements full range of security protection measures for intranet computer terminals including security configuration, vulnerability repair and virus killing. This system is divided into two parts -- client and server. Not only the ordinary users could check and repair their own computers through clients, but also the manager could implement security management to all the client computers. Through deployment and test, it is verified that the system can protect the security of intranet computers efficiently.