基于网络准入控制的企业内网终端安全防护研究

Research on enterprise intranet terminal security protection based on network access control

网络准入控制是一种较为常见的内网安全防护策略。文章以某企业电网大局域网为例,对该策略的具体应用进行分析;在介绍了网络准入总体架构的基础上,对其中包括的准入控制联动、层级控制及弱安全控制等3项关键技术进行介绍;利用模拟攻击的方式对网络的总体安全性进行评价,发现网络准入控制在防范网络安全问题中具有积极作用。

Network access control is a common Intranet security protection strategy.This paper takes an enterprise power grid large LAN as an example to analyze the specific application of the strategy;On the basis of introducing the overall structure of network access,three key technologies including access control linkage,hierarchical control and weak security control are introduced.It is found that network access control plays an active role in preventing network security problems by using simulated attack method to evaluate the overall security of network.