医院网络建设现状及整改措施分析

Current Situation of Hospital Network Construction and Rectification Measures

目前医院网络设备老化、私搭乱接情况普遍、IP地址非法占用频发,缺乏安全管控措施,存在极大的安全隐患。为保障医院医疗业务有序运转,中国人民解放军联勤保障部队第九八三医院对从整体上对网络架构进行重新规划,从软件和硬件上提高了网络稳定性,避免了路由环路、非法接入、网络风暴的产生。根据安全等级保护要求,采用桌面管理、入侵检测、动态防御等措施,降低了网络遭受攻击的风险。完善了各项管理措施,规范了网络的管理,提高了网络运维的效率。优化后的网络模式为标准的三层架构,根据实际需求科学精细地划分了虚拟局域网(virtual local area network,VLAN),显著提高了网络的安全稳定性,且易于管理维护。统一的安全防护体系具有对抗各种网络攻击的能力,保障了医疗数据信息的安全。

Owing to aging network equipment,unauthorized connection and lack of supervision,great network safety hazard is existed in hospital.To ensure normal operation of medical business,the network architecture is replanned in the 983th Hospital of PLA Joint Logistics Support Force.To avoid routing loops,illegal access,and network storm,network stability is promoted by replacing hardware and software.According to the protection requirements of safety level,desktop management,intrusion detection,dynamic defense and other measures are adopted to reduce the risk of network.Various management measures are made to improve the efficiency of network operation.With the optimized three layers architecture network,virtual local area network(VLAN)is divided scientifically and meticulously.The network is more stable and convenient.Unified security protection system has the ability to resist various network attacks and ensure the security of medical data information.