基于网络安全等级保护的信息系统安全设计

Information System Based on Network Security Level Protection

为了提高校园信息系统在运行中的安全性,根据网络安全等级保护的划分标准,设计一种基于网络安全等级保护的信息系统。首先,根据网络安全等级保护的划分标准,设计信息系统权限分配过程;其次,引进Pareto存档进化策略算法(The Pareto Archived Evolution Strategy,P-AES),设置信息系统安全通信密钥,对系统在通信过程进行实时加密与安全防护;最后,构建系统信息安全存储中心,提供系统信息有效存储空间。将以西安外国语大学为例,按照设计的方法,对校园网下的信息系统进行安全部署,评估信息系统在传输或流通信息时的安全性。实践结果证明,此方法在实际应用中,可以有效提高信息系统安全性,保证校园网通信安全。

In order to improve the security of campus information system in operation, according to the classification standard of network security level protection, an information system based on network security level protection is designed. Firstly, according to the classification standard of network security level protection, the process of information system permission allocation is designed;Secondly,the Pareto Archived Evolution Strategy(P-AES) is introduced to set the security communication key of the information system to encrypt and protect the system in real time during the communication process;Finally, build the system information security storage center to provide effective storage space for system information. Taking Xi’an Foreign Studies University as an example, according to the design method, the security deployment of the information system under the campus network will be carried out to evaluate the security of the information system when transmitting or circulating information. The practical results show that this method can effectively improve the security of information system and ensure the communication security of campus network in practical application.