计算机网络系统的安全分析与设计

Security Analysis and Design of Computer Network Systems

网络系统的安全因素有四个方面,物理因素、技术因素、管理因素、用户因素。常用的网络安全机制有计算机防火墙、入侵检测系统、网络漏洞扫描及系统安全评估、防病毒系统。在实际设计时,可以使用双重防火墙和入侵检测系统的联动,使内部网络和外部网络形成接近物理隔离的方式,数据经过防火墙、入侵检测系统、防病毒系统的监控,识别其安全级别,防止非法访问或者非法用户的侵入,从而获得较高的安全性。

The security of a network system involves physical factors,technical factors,management factors and user factors.The common network security mechanism includes computer firewalls,intrusion detection systems,networkvulnerability scan and system security assessment,and anti-virus systems.In actual design,the linkage of double-layer firewall and intrusion detection system can be used to form the physical isolation between the internal and the external networks,the security level of data can be recognized through the monitoring of the firewall,the intrusion diction system andthe anti-virus system,and illegal access or intrusion of illegal users can be prevented,thus higher security of the network system can be achieved.