一个大型网络数据中心安全解决方案

Security Design of a Large Network Data Center

目前在大型网络的 IDC基础上实现了远程教育系统 ,为远程教育提供了一个全新的教育手段。数据中心以 Internet互连技术体系作为基础 ,由于早期网络协议对安全问题的忽视 ,以及在使用和管理上的无政府状态 ,使 Internet自身的安全受到严重威胁。在分析网络安全需求基础之上 ,提出了一个大型网络数据中心分层次的 (环境和硬件层、网络层、操作系统层、数据库层、应用层 )、采用多种措施的 (防病毒、访问控制、加密与认证、漏洞扫描和入侵检测等 )较为完整的安全解决方案。

Based on the IDC of a large network, the long-distance education system provides an advanced and modern method for academy education. IDC uses the technique of Internet, but its security can not be secured due to neglect of network protocol to security and disorder in network managerment and use. After the introduction of the current large network data center, a security design of the network data center is put forward. The project is divided into five levels, i.e. hardware level, network level, operation system level, database level, and application level, and includes many techniques, such as intrusion detection, vulnerability scanner, ACS, encryption and certification, anti-virus and so on.