A Practical Study of Big Data Technology in Computer Network Information Security Processing

In recent years,China has witnessed continuous development and progress in its scientific and technological landscape,with widespread utilization of computer networks.Concurrently,issues related to computer network information security,such as information leakage and virus invasions,have become increasingly prominent.Consequently,there is a pressing need for the implementation of effective network security measures.This paper aims to provide a comprehensive summary and analysis of the challenges associated with computer network information security processing.It delves into the core concepts and characteristics of big data technology,exploring its potential as a solution.The study further scrutinizes the application strategy of big data technology in addressing the aforementioned security issues within computer networks.The insights presented in this paper are intended to serve as a valuable reference for individuals involved in the relevant fields,offering guidance on effective approaches to enhance computer network information security through the application of big data technology.

Performance Evaluation of an Internet Protocol Security (IPSec) Based Multiprotocol Label Switching (MPLS) Virtual Private Network

This paper evaluates the performance of Internet Protocol Security (IPSec) based Multiprotocol Label Switching (MPLS) virtual private network (VPN) in a small to medium sized organization. The demand for security in data networks has been increasing owing to the high cyber attacks and potential risks associated with networks spread over distant geographical locations. The MPLS networks ride on the public network backbone that is porous and highly susceptible to attacks and so the need for reliable security mechanisms to be part of the deployment plan. The evaluation criteria concentrated on Voice over Internet Protocol (VoIP) and Video conferencing with keen interest in jitter, end to end delivery and general data flow. This study used both structured questionnaire and observation methods. The structured questionnaire was administered to a group of 70 VPN users in a company. This provided the study with precise responses. The observation method was used in data simulations using OPNET Version 14.5 Simulation software. The results show that the IPSec features increase the size of data packets by approximately 9.98% translating into approximately 90.02% effectiveness. The tests showed that the performance metrics are all well within the recommended standards. The IPSec Based MPLS Virtual private network is more stable and secure than one without IPSec.

A Research on the Application of Virtual Network Technology in Computer Network Security

In the computer field,network security is a crucial integrant.It is necessary to pay attention on the application of virtual network technology,so as to raise the standard of computer network security to a new level[2].In view of this,this paper will analyze the application of virtual network technology in computer network security and propose some strategies for future reference.

Effective and Extensive Virtual Private Network

A Virtual Private Network (VPN) allows the provisioning of private network services for an organization over a public network such as the Internet. In other words a VPN can transform the characteristics of a public which may be non-secure network into those of a private secure network through using encrypted tunnels. This work customized a standard VPN to a newly one called EEVPN (Effective Extensive VPN). It transmits a small data size in through a web based system in a reasonable time without affecting the security level. The proposed EEVPN is more effective where it takes small data transmission time with achieving high level of security. Also, the proposed EEVPN is more extensive because it is not built for a specific environment.

Discussion and Research on Information Security Attack and Defense Platform Construction in Universities Based on Cloud Computing and Virtualization

This paper puts forward the plan on constructing information security attack and defense platform based on cloud computing and virtualization, provides the hardware topology structure of the platform and technical framework of the system and the experimental process and technical principle of the platform. The experiment platform can provide more than 20 attack classes. Using the virtualization technology can build hypothesized target of various types in the laboratory and diversified network structure to carry out attack and defense experiment.

Improving the Cybersecurity Framework for Future Consumer Networks

The framework Information Technology professionals and Network Organizations use is often seen as open and dynamic. This can create many different pathways for cybercriminals to launch an attack on an enterprise network to cause panic, this situation could be prevented. Using the proposed framework, network administrators and networked organizations can improve their cybersecurity framework for future consumer networks. Implementing a network security plan that is up to date and outlines responsibilities of team members, creating a government subsidy to implement and increase safeguards on US based networks, and the analyzing of past cyber-attacks metadata to further understand the attacks that are causing problems for consumer networks can improve the cybersecurity framework for consumer networks and increase potential security on US based networks. Research found that the implementation of security plans, creating a government subsidy, and analyzing past metadata all show signs of improving the framework of cybersecurity in consumer based networks.

Using the Latin Square Design Model in the Prioritzation of Network Security Threats: A Quantitative Study

Society is becoming increasingly dependent on cyberspace for both business and pleasure. Cyber attackers continue to attack organizational computer networks, as those same computer networks become increasing critical to organizational business process. Strategic planning and managing IT security risks play an important role in the business and government planning process. Deploying defense in depth security measures can ensure that organizations continue to function in times of crisis. This quantitative study explores whether the Latin Square Design (LSD) model can be effectively applied to the prioritization of cybersecurity threats and to the linking of information assurance defense in-depth measures to those threats. The methods used in this study consisted of scanning 10 Cybersecurity Websites such as the Department of Homeland Security US CERT (United States-Computer Emergency Readiness Team [1]) and the SANS Institute (SysAdmin, Audit, Network and Security [2]) using the Likert Scale Model for the Website’s top ten list of cyber threats facing organizations and the network defense in depth measures to fight those threats. A comparison of each cybersecurity threats was then made using LSD to determine whether the Likert scale and the LSD model could be effectively applied to prioritize information assurance measures to protect organizational computing devices. The findings of the research reject the H0 null hypothesis that LSD does not affect the relationship between the ranking of 10 Cybersecurity websites top ten cybersecurity threats dependent variables and the independent variables of defense in depth measures used in protecting organizational devices against cyber-attacks.

Reducing Threats by Using Bayesian Networks to Prioritize and Combine Defense in Depth Security Measures

Studied in this article is whether the Bayesian Network Model (BNM) can be effectively applied to the prioritization of defense in-depth security tools and procedures and to the combining of those measures to reduce cyber threats. The methods used in this study consisted of scanning 24 peer reviewed Cybersecurity Articles from prominent Cybersecurity Journals using the Likert Scale Model for the article’s list of defense in depth measures (tools and procedures) and the threats that those measures were designed to reduce. The defense in depth tools and procedures are then compared to see whether the Likert scale and the Bayesian Network Model could be effectively applied to prioritize and combine the measures to reduce cyber threats attacks against organizational and private computing systems. The findings of the research reject the H0 null hypothesis that BNM does not affect the relationship between the prioritization and combining of 24 Cybersecurity Article’s defense in depth tools and procedures (independent variables) and cyber threats (dependent variables).

Safety Protection Design of Virtual Machine Drift Flow in Cloud Data Center Based on VXLAN Technology

Based on the analysis of the security problems existing in the cloud platform of the data center, this paper proposes a set of cloud platform security protection scheme being with virtualization technology. This paper focuses on the overall architecture of cloud platform as well as the design of virtualization security architecture. Meantime, it introduces the key technologies of VXLAN in detail. The scheme realizes flexible scheduling of security resources through virtual pooling of independent security gateway and virtual machine isolation through VXLAN technology. Moreover, it guides all horizontal traffic to independent security gateway for processing, unified management of security gateway through cloud platform by using Huawei NSH business chain technology. This scheme effectively solves the horizontal transmission of security threat among virtual machines, and realizes the fine security control and protection for the campus data center.

IP Security协议分析及VPN建设探讨

VPN是实现在公网上安全传输和私有网络信息的一种技术 .IPSec是新一代互连网安全标准。结合IPSec协议标准 ,研究基于IPSec的VPN技术及实现 ,指出IPSec在VPN安全性方面的重要作用 ,对提高网络的安全性和可靠性 。

Remote Access Communications Security: Analysis of User Authentication Roles in Organizations

Remote access is a means of accessing resources outside one’s immediate physical location. This has made employee mobility more effective and productive for most organizations. Remote access can be achieved via various channels of remote communication, the most common being Virtual Private Networks (VPNs). The demand for remote access is on the rise, especially during the Covid-19 pandemic, and will continue to increase as most organizations are re-structuring to make telecommuting a permanent part of their mode of operation. Employee mobility, while presenting organizations with some advantages, comes with the associated risk of exposing corporate cyber assets to attackers. The remote user and the remote connectivity technology present some vulnerabilities which can be exploited by any threat agent to violate the confidentiality, integrity and availability (CIA) dimensions of these cyber assets. So, how are users and remote devices authenticated? To what extent is the established connection secured? With employee mobility on the rise, it is necessary to analyze the user authentication role since the mobile employee is not under the monitoring radar of the organization, and the environment from which the mobile employee connects may be vulnerable. In this study, an experiment was setup to ascertain the user authentication roles. The experiment showed the process of 2FA in user authentication and it proved to be an effective means of improving user authentication during remote access. This was depicted via the use of what the user has (mobile phone/soft-token) as a second factor in addition to what the user knows, i.e. password. This authentication method overcomes the security weaknesses inherent in single-factor user authentication via the use of password only. However, the results also showed that though 2FA user authentication ensures security, the remote devices could exhibit further vulnerabilities and pose serious risks to the organization. Thus, a varied implementation was recommended to further enhance the security of remote access communication with regards to the remote user authentication.

Using Linear Regression Analysis and Defense in Depth to Protect Networks during the Global Corona Pandemic

The purpose of this research was to determine whether the Linear Regression Analysis can be effectively applied to the prioritization of defense-in-depth security tools and procedures to reduce cyber threats during the Global Corona Virus Pandemic. The way this was determined or methods used in this study consisted of scanning 20 peer reviewed Cybersecurity Articles from prominent Cybersecurity Journals for a list of defense in depth measures (tools and procedures) and the threats that those measures were designed to reduce. The methods further involved using the Likert Scale Model to create an ordinal ranking of the measures and threats. The defense in depth tools and procedures were then compared to see whether the Likert scale and Linear Regression Analysis could be effectively applied to prioritize and combine the measures to reduce pandemic related cyber threats. The results of this research reject the H0 null hypothesis that Linear Regression Analysis does not affect the relationship between the prioritization and combining of defense in depth tools and procedures (independent variables) and pandemic related cyber threats (dependent variables).

SecureGuard-Solaris环境下VPN的设计与实现

1引言VPN(Virtual Private Network)具体实现是采用隧道技术,将企业网的数据封装在隧道中进行传输.因此,VPN技术的复杂性首先建立在隧道协议复杂性的基础之上.隧道协议中最为典型的有CRE、IPSec、L2TP、PPTP、L2F等.其中GRE、IPSEC属于第三层隧道协议,L2TP、PPTP、L2F属于第二层隧道协议.第二层隧道和第三层隧道的本质区别在于用户的IP数据包是被封装在何种数据包中在隧道中传输的.

美国商务部工业与安全局情报工作透视

[研究目的]从情报学和情报工作专业视角研究美国商务部工业与安全局(The Bureau of Industry and Secur-ity of U.S.Department of Commerce,BIS)的情报工作,为新时期中国情报学和情报工作创新发展提供参考。[研究方法]通过BIS官方网站信息内容研究、官方网站重要文件研究、瓦森纳协定官方网站信息内容研究、BIS典型执法案例研究相结合的方法,研究BIS情报工作的全貌和精要。[研究结论]从情报学和情报工作专业视角对BIS的组织机构使命、组织网络、信息网络、人际网络、法律保障、典型情报工作、提升美国出口商情报能力的主要工作进行研究,揭示了BIS情报工作全貌、精要和最突出的关键成功因素。

网络安全中数据加密技术的运用分析

在当今信息化时代,计算机网络已成为社会运作和日常生活的基础设施,承载着海量数据的传输与交换。随着网络空间的不断扩展,数据安全问题日益凸显,信息泄露、篡改、盗用等安全事件频发,严重威胁个人隐私、用户机密乃至国家安全。基于此,旨在深入探讨数据加密技术在计算机网络信息安全中的应用,分析其在保障数据完整性、机密性和可用性方面的作用,为网络安全提供更为坚实的防线。

一种基于虚拟专用网的网络安全解决方法

随着信息社会化的到来,网络安全形势日益严峻。组织单位内的个人身份信息、生物识别信息、单位财务信息、商业机密等敏感信息一旦泄露,可能会导致组织单位遭受重大财产损失。本文提供一种组织内部敏感信息安全访问的解决方案,其思路是将网络划分成三个区域,将组织单位服务器及敏感信息置于授权的虚拟专用网络中,其他区域均应通过严格的身份认证和授权方可访问授权区域,同时通过高强度的加密技术和安全传输通道实现信息的安全传输。

新版GB/T 22081-2024《网络安全技术信息安全控制》国家标准解读

为各类组织更好地理解和使用信息安全管理体系相关标准,介绍信息安全管理体系(ISMS)国际标准化动态,阐述GB/T 22081—2024《网络安全技术信息安全控制》国家标准修订和试点工作情况,分析新版标准与2016版的变化内容,包括标准名称变化、控制类别变化等。

计算机信息管理技术在维护网络安全中的运用

随着信息技术的飞速发展和互联网的普及,网络安全问题日益突出。网络攻击、数据泄露等安全事件频繁发生,给用户和组织带来了巨大的风险与损失。为了应对这一挑战,计算机信息管理技术迅速崭露头角,成为维护网络安全的重要手段之一。基于此,本文针对计算机管理技术在维护网络安全中的应用展开研究,以期为相关工作人员提供借鉴和参考。

信息化时代下新能源汽车教育课程改革创新探索

新能源汽车涉及电子、电气、机械、软件等多个学科,随着5G和物联网技术的发展,新能源汽车正向智能网联方向发展,职业教育需要增加相关课程,培养学生在智能网联汽车领域的知识和技能,加强实践教学。该文通过分析当前教育模式存在的问题,提出了将信息化手段融入课程设计与教学实施的建议,并围绕基于5G技术的车辆联网应用、虚拟仿真教学平台的构建、多学科融合教学模式的探索,以及校企合作培养模式的优化。旨在培养具备实践能力和创新精神的新能源汽车技术人才,推动职业教育与产业发展的深度融合。

计算机网络维护中的安全技术应用

阐述计算机网络安全技术在网络安全维护中的作用,分析面临的问题,从加强技术研发与创新、完善安全管理制度、强化跨境安全合作方面,提出计算机网络安全技术在网络安全维护中的优化措施。