金融机构信息系统安全架构规划和建设

发布时间：2018-02-25 23:08

本文关键词： 金融机构信息安全网络技术可靠性安全性　出处：《复旦大学》2014年硕士论文　论文类型：学位论文

【摘要】：随着时代的进步,科技的发展,现今金融行业已成为信息化产业快速发展的的最大收益者,在业产品、业务、管控、风险等各方面对计算机和网络系统依赖程度日益增加。而随着在金融领域,各家金融产品的不断涌现与革新,金融业务及产品在给机构带来巨大效益的背后,同时也隐藏着巨大的安全隐患和风险。金融机构信息系统中传输、存储的都是金融机构极其重要且保密级别最高的资料,一旦金融系统遭受攻击或发生系统故障,后果不堪设想,严重的可能会引发国家经济状况的瘫痪和崩溃及国际危机。尽管目前国内外主要的大型机构普遍对计算机信息系统安全性、应急反应速度等予以了高度重视,通过采用多种技术和管理措施来增强整个系统的可靠性、安全性和应急反应速度。然而许多金融机构在企业骨干网络架构建设的初期比较少的将注意力放在业务安全防控的范畴,加上金融机构缺乏必要的信息安全领域专业的技术和管理人才及有效的规范管理制度,尤其在对系统突发安全状况下的应急处理能力上,无法及时、有效、规范地利用正确的解决方法作出响应,而往往在灾难发生之后想方设法地花费大量人力、物力去弥补,无法做到未雨绸缪,防范于未然,这是金融机构的管理层和监管当局最不愿看到的局面。本文旨在从金融行业信息安全现状、形势及发展趋势出发,深入分析了加强金融机构信息系统安全架构的重要性、必要性和意义。从技术角度出发,介绍信息安全体系、网络安全技术中,防范、检测、控制、应急反应、管理、评估等多方面的基础理论和实施技术。然后深入分析我国金融行业在运用上述技术时的做法,揭示其基础网络、系统架构和备份系统部署存在的缺陷和风险隐患点。为解决金融行业在信息安全方面的这些问题,推出本文的解决方案,“金融机构信息系统安全架构规划和建设”,从组织管理和技术管理层面对其进行全面规划建设。融合了多种网络安全技术,内含基础网络安全、服务器存储架构安全技术、备份系统安全技术。提出了统一金融企业核心局域网络建设,明确金融企业核心局域网络的整体架构和技术方案；对金融企业核心局域网络的结构进行层次化和模块化建设等规划方案设想。从根本上解决、全方位提升金融企业信息系统安全的管控能力。
[Abstract]:With the progress of the times, the development of science and technology, the financial industry has become the rapid development of information industry, the biggest beneficiaries in the industry, products, services, management, and other aspects of the risk to the computer and the network system. With the increasing reliance on the financial sector, the financial innovation and emerging products, behind the financial business and products in institutions to bring huge benefits, but also a huge hidden security risks. The transmission of information systems of financial institutions, storage of financial institutions are very important and secure the highest level of information, once the financial system attacks or system failure occurs, the consequences be unbearable to contemplate, serious may lead to national economy the paralysis and collapse and the international crisis. Although there is a large main agencies at home and abroad of the computer information system safety, emergency response speed to A high degree of attention to enhance the reliability of the whole system by using a variety of techniques and management measures, safety and emergency response speed. However, many financial institutions in the early construction of the enterprise backbone network architecture with less focus on the business security category, and financial institutions lack the necessary professional technology and the field of information security management personnel and effective management system, especially in the emergency handling ability of the security system under the emergency situation, not timely, effective, standardized use of the right way to respond, but often in the aftermath of a disaster to spend a lot of manpower, material resources to make up, do not take precautions to prevent this. Is the management of financial institutions and regulatory authorities are most reluctant to see the situation. This paper aims at the actuality of information security in the financial industry, the situation and development trend Starting, in-depth analysis of the importance of financial institutions to strengthen the information system security architecture, necessity and significance. From the angle of technology, the information security system, network security, prevention, detection, control, emergency response, management, evaluation and other aspects of the basic theory and implementation technique. Then in-depth analysis in the application of the technical the practice of China's financial industry, reveals the basic network, system architecture and deployment of backup system defects and risks. In order to solve the financial industry in the information security aspects of these problems, this paper introduced solutions, "information system security architecture planning and construction of financial institutions, from organization management and technical management the overall planning and construction. The integration of a variety of network security technology, including network security infrastructure, server storage architecture security technology, security technology and backup system is proposed. The unified financial enterprise core local area network construction, the overall structure of a clear financial enterprise core network and technology scheme; structure of financial enterprise core network planning idea of hierarchical and modular construction. From the fundamental solution, to enhance the financial security of enterprise information system management.

【学位授予单位】：复旦大学
【学位级别】：硕士
【学位授予年份】：2014
【分类号】：TP393.08

【相似文献】