企业网络安全解决方案研究与设计

发布时间：2018-06-01 21:12

本文选题：企业网络环境 + 风险分析　；参考：《河北工程大学》2014年硕士论文

【摘要】：随着全球信息化的逐步加快和计算机技术的快速发展，信息全球化已经成为社会发展的趋势。但网络本身存在各种各样的缺陷，因此网络安全成为社会关注的重点，并成为科技研究领域的热点。企业内部的网络以及网络信息已经实现了资源共享。由于企业内部信息包括很多单位机密，因此安全问题更加重要。本文结合企业网络的发展趋势，对当前网络系统面临的安全问题和风险问题进行了系统综合的分析研究，提出了系统的安全需求。然后在减少成本的情况下，，应用先进的网络安全技术，如防火墙技术、入侵检测技术、容灾和备份技术等，设计制定了科学的企业网络安全解决方案。尤其是网络边界的隔离、访问控制、与帧中继的安全连接，并对解决内部网络系统的安全方面做了详细的设计，最后对企业的云安全进行了研究。相比传统的安全防火墙防御措施来说，本文则更加系统全面，不仅仅能够防止企业外部网络对企业内部网络的攻击，而且还能防御内网之间的攻击，进而提供更强的防御能力和安全监测能力，为网络系统提供更强的保障，为用户提供多层次和全面的立体防护体系。
[Abstract]:With the gradual acceleration of global information and the rapid development of computer technology, information globalization has become the trend of social development. However, the network itself has all kinds of defects, so network security has become the focus of social attention, and has become a hot spot in the field of scientific and technological research. The network and network information within the enterprise have realized the resource sharing. Because the internal information of the enterprise includes a lot of units confidential, so the security problem is more important. Combined with the development trend of enterprise network, this paper makes a systematic and comprehensive analysis and research on the security and risk problems faced by the current network system, and puts forward the security requirements of the system. Then under the condition of reducing the cost, applying advanced network security technology, such as firewall technology, intrusion detection technology, disaster recovery and backup technology, a scientific enterprise network security solution is designed. Especially the isolation of network boundary, access control, security connection with frame relay, and the detailed design of the security of the internal network system. Finally, the cloud security of the enterprise is studied. Compared with the traditional security firewall defense measures, this paper is more systematic and comprehensive, not only to prevent the external network of the enterprise from attacking the internal network, but also to defend against the attack between the inner network. Furthermore, it provides stronger defense capability and security monitoring ability, provides stronger protection for network system, and provides multi-level and comprehensive three-dimensional protection system for users.
【学位授予单位】：河北工程大学
【学位级别】：硕士
【学位授予年份】：2014
【分类号】：TP393.08

【参考文献】