高校信息化网络体系设计与安全研究

发布时间：2018-04-27 03:15

本文选题：信息化 + 通信　；参考：《安徽大学》2014年硕士论文

【摘要】：高校信息化网络系统是国家信息化战略的重要基础平台,是教育信息化建设进程最为重要的环节,同时也是高校重要的基础设施,是一个典型的校园网；担当着学校教学、科研、管理和对外交流平台等角色。提供可靠的信息传输通道、提高信息传输过程安全保障、信息的可靠保护,是在建设信息化校园网络系统当中需要解决的重要问题。本文结合作者所在工作单位网络系统当前实际和用网特征,从骨干网通信系统和安全防护两个方面对本校信息化校园网系统进行改造设计研究。分析了骨干通信系统改造的原因,并在此基础上对通信骨干平台进行全新设计,提出分层架构通信体系以保障系统运行安全,可靠。文中对分层架构的通信系统各功能模块进行相应设计描述,设计中采用DMZ方式保障网络通信系统对外服务。在全新设计的校园网通信平台基础上展开安全防护研究工作,分析了影响网络系统安全原因和常用的安全防护保障技术。从用户管理、系统管理、物理安全以及安全防护技术四个个方面设计了适合本单位实际应用需求的MP2DR安全模型。采用基于ISPec和L2TP协议二、三层隧道技术实现VPN组网以及虚拟防火墙等技术手段作为MP2DR安全防护平台的具体实现技术。基于校园网网络系统复杂性,为保障数据信息传递过程路由选择最优以多QoS服务保障,本文对整个校园网系统进行采用区域自治划分策略,并对比路由协议,最后设计了基于OSPF协议满足多QoS服务的最优路由选择蚁群算法来保障通信系统路由选择。
[Abstract]:The university informatization network system is the important foundation platform of the national informatization strategy, is the most important link of the educational informatization construction process, is also the university important infrastructure, is a typical campus network, acts as the school teaching, Scientific research, management and external communication platform and other roles. It is an important problem to solve in the construction of information campus network system to provide reliable information transmission channels, to improve the security of information transmission process and to protect information reliably. In this paper, according to the characteristics of the network system in the work unit, the author designs and designs the information campus network system of our school from the aspects of backbone network communication system and security protection. Based on the analysis of the reasons for the reform of the backbone communication system, a new design of the communication backbone platform is carried out, and a layered communication system is proposed to ensure the safety and reliability of the system. In this paper, the function modules of hierarchical communication system are designed and described, and the DMZ mode is adopted to guarantee the external service of the network communication system. Based on the newly designed campus network communication platform, the research work of security protection is carried out, and the reasons that affect the security of network system and the common security protection techniques are analyzed. From four aspects of user management, system management, physical security and security protection technology, a MP2DR security model suitable for the practical application requirements of our unit is designed. Based on ISPec and L2TP protocol two, three layer tunnel technology is used to realize VPN network and virtual firewall as the concrete implementation technology of MP2DR security protection platform. Based on the complexity of campus network system, in order to ensure the optimal routing selection of data transmission process with multiple QoS services, this paper adopts a regional autonomous partition strategy for the whole campus network system, and compares the routing protocol. Finally, an ant colony algorithm for optimal routing based on OSPF protocol to satisfy multiple QoS services is designed to ensure routing selection in communication systems.
【学位授予单位】：安徽大学
【学位级别】：硕士
【学位授予年份】：2014
【分类号】：TP393.18

【相似文献】