Design and Implementation of Security Architecture Based on Enterprise Computer Network
|更新时间:2026-09-14
|
Design and Implementation of Security Architecture Based on Enterprise Computer Network
基于企业的计算机网络安全方案的设计与实现
Issue 3, Pages: 187-192(2005)
作者机构:
1. ,山西,太原,030051
2. 教育部“仪器科学与动态测试”重点实验室
3. 北京理工大学机器人中心
作者简介:
基金信息:
DOI:
CLC:
Published:2005
稿件说明:
移动端阅览
韩慧莲, 徐力, 龚清勇, et al. Design and Implementation of Security Architecture Based on Enterprise Computer Network[J]. 2005, (3): 187-192.
DOI:
韩慧莲, 徐力, 龚清勇, et al. Design and Implementation of Security Architecture Based on Enterprise Computer Network[J]. 2005, (3): 187-192.DOI:
Design and Implementation of Security Architecture Based on Enterprise Computer Network
摘要
计算机网络的发展及Internet的广泛应用
加快了企业和社会信息化的进程
同时也带来了许多网络安全问题.因此
根据企业网络的应用和日益突出的内部网络安全问题
本文在研究企业网系统结构的基础上
提出了采用三层交换机和VLAN技术实现用户访问控制
在网络模型的不同层次上采用相应的防火墙实现内外网的隔离
并应用集成开发环境C++Builder和SQL数据库技术实现了数据加密传输和数字签名的身份认证
建立了日志管理和数据备份子系统
有效地保证了数据传输的机密性、完整性和可靠性.网络安全是一个复杂的系统工程
必须将多种防范策略相互配合
建立和健全多层次、全方位的安全防范体系
才能从整体上提高网络的安全性.
Abstract
The development of the computer network and wide application of Internet have accelerated the process of enterprises and social informalities
but at the same time they have brought a lot of network security problems. So
according to the network application inside enterprises and the security problems existing in network
the paper presents some methods such as using the tri-layer switch and VLAN technology to realize user access control
using corresponding firewalls on the different levels of the network model to realize the isolation between interior and exterior network. Moreover
data transmission by encryption and identity authentication by digital signature were realized by using IDE-C++ Builder and SQL database technology
and the log management sub-system as well as database backup sub-system were constructed. The network security is complicated system engineering
so many kinds of security policy is needed to be use in concert with each other
and multilayer multidimensional precaution architecture of network security needed to be established also in order to improve the security of networks as a whole.