基于网络隔离技术的信息资源共享方案研究

Research on Information Resource Sharing Scheme Based on Network Isolation Technology

为有效避免各类网络攻击导致企业内部数据泄露,目前最有效的方法是将企业内部网络与外部网络进行物理链路隔离。使用网闸实现内外网数据双向摆渡,容易造成内网数据大量泄露,无法应用于安全保护等级较高的企业网;同时现有网络隔离技术对传输数据的协议剥离,容易导致信息泄露,形成新的安全漏洞。为此,提出一种新的信息资源共享方案,利用网络安全边界平台将外网信息单向导入内网,在内网通过可信任第三方短信平台将信息反馈至外网终端,有效控制内网数据输出,最终完成企业内部数据资源共享;运用改进的DES/RSA混合加密算法对传输数据文件进行加密和身份认证,避免网闸协议剥离导致的信息泄露。设计并实现了一款SMS信息查询系统,实例分析证明该方案在安全和效率等方面能够满足预定要求。

In order to avoid network attacks lead to enterprise internal data leakage, the most effective way was isolating physical link between the enterprise internal network and internet. It＇s easy to leakage the enterprise internal data, when you use the traditional gap to interactive data between internal network and internet. Furthermore, the old Way of exchan- ging data can not be applied to protect the high security level enterprise network; On the other hand, the existing network isolation technology for network protocol is easy to peel,resulting in information disclosure, and cause the new security vulnerabilities. Therefore, this thesis proposes a new information resource sharing scheme, transport internet data through Network Security Boundary Platform by using one-way import network,and using a trusted third party SMS platform for information feedback to the internet terminal. Restrict control the network data output, the final completion of data sharing within Enterprise; The use of improved DES/RSA hybrid encryption algorithm to encrypt the data file encryption and i- dentity authentication,to avoid the information leakage caused by the peeling the network protocol. Design and implemen- tation of a SMS information system, the case analysis proves that this scheme can meet the requirements in security and efficiency.