信息网络隔离在杭州供电公司的设计与实现

发布时间：2018-04-23 22:13

本文选题：网络 + 信息　；参考：《华北电力大学》2014年硕士论文

【摘要】：随着电力企业的快速发展,网络信息技术的不断更新,如何保障电力企业信息网络安全稳定运行,确保信息安全,已经成为影响电力企业安全生产的重大问题之一。网络系统作为信息安全防护体系的基础,网络隔离的实现势在必行! 本文介绍了信息安全的现状,对杭州电力信息安全防护体系进行了调研,并进行了信息安全风险分析。提出了企业信息网络安全的总体要求,明确了信息内、外网的定位和总体设计原则。通过对国内外多种网络隔离技术的研究分析,从提高网络可靠性、增强信息网络安全性以及投资经济性的角度出发,对现有几种比较流行的网络隔离技术进行了研究比较,归纳了各自的优缺点,给出了一个物理隔离与MPLS VPN技术隔离相结合的设计思路。结合企业信息网的现状,开展企业信息网内外网网络隔离方案的设计。确定了广域网骨干链路采用MPLS VPN技术为主,城域网采用物理隔离为主的网络隔离设计方案,并在杭州电力信息网改造升级工作中予以实现。设计方案安全可靠、科学合理,综合考虑了企业信息网络资源,充分利用了SDH传输链路、通信光纤链路、ADSL等通信通道资源,具有较高的经济价值,适用于生产实际。隔离后的网络系统为企业提供了坚强可靠的网络环境,经受住了迎峰度夏和“两会”安保的考验,说明本文的工作成果在实践中得以体现。
[Abstract]:With the rapid development of electric power enterprises and the continuous updating of network information technology, how to ensure the safe and stable operation of power enterprise information network and ensure information security has become one of the major problems affecting the safe production of electric power enterprises. Network system as the foundation of information security protection system, the realization of network isolation is imperative! This paper introduces the present situation of information security, investigates the information security protection system of Hangzhou electric power, and analyzes the risk of information security. This paper puts forward the general requirements of enterprise information network security, and clarifies the orientation and overall design principle of information inside and outside network. Through the research and analysis of many kinds of network isolation technologies at home and abroad, from the point of view of improving network reliability, enhancing information network security and investment economy, several popular network isolation technologies are studied and compared. The advantages and disadvantages of each are summarized, and a design idea of combining physical isolation and MPLS VPN isolation is given. According to the present situation of the enterprise information network, the design of the isolation scheme of the inside and outside network of the enterprise information network is carried out. In this paper, MPLS VPN technology is used as the main technology in the backbone link of WAN, and the design scheme of network isolation based on physical isolation is adopted in metropolitan area network, which is realized in the upgrading of Hangzhou Electric Power Information Network. The design scheme is safe and reliable, scientific and reasonable, considering the enterprise information network resources synthetically, making full use of the communication channel resources such as SDH transmission link, communication fiber link and so on. It has higher economic value and is suitable for production practice. The isolated network system provides a strong and reliable network environment for the enterprise, and withstands the test of meeting the peak in summer and the security of the "two sessions", which shows that the achievements of this paper can be reflected in practice.
【学位授予单位】：华北电力大学
【学位级别】：硕士
【学位授予年份】：2014
【分类号】：TP393.08;TM73

【参考文献】