企业人事管理系统安全性研究

Research on Security of Enterprise Human Resource Management System

人事管理系统在企业中的广泛应用,一方面提高了企业的办公效率,另一方面也带来了信息泄密的危险.其安全性问题可以从服务器安全、应用软件安全与部署安全三个方面展开研究.本文针对服务器安全问题,提出了恰当的操作系统、数据库应用策略;针对应用软件安全问题,提出了基于二次SM3加密算法的身份认证、多角色的权限管理及多方面的日志记录安全策略;针对部署安全问题,结合人事管理系统使用环境,提出了内网防火墙部署策略.最后,用一个应用案例来具体说明系统安全性策略的细节.

On one hand, the wide application of human resource management system in enterprise significantly improves the efficiency of the enterprise. On the other hand, it also puts the enterprise at risk on information leak. The research can be conducted from the security of server, the security of software and the security of deployment. A suitable application strategy of operating system and database was used to deal with the problem of the security of server. The authentication based on the twice-used SM3 encryption algorithm, the authority management with multi-roles and the log record with multi-aspect are the security strategy to the problem of software. In consideration of application environment of human resource management in enterprise, a deployment strategy of intranet firewall was proposed to solve the problem of the security of deployment. Finally, an application case was used to concretely describe the details of system security strategy.