企业网络的安全策略和性能评估

发布时间：2018-07-22 14:58

【摘要】：在企业管理信息系统(MIS)中,安全性和性能的稳健性是企业成功的关键因素。如今,MIS是由人工操作不同的通信计算机和电子基础设施,以实现企业的共同目标。这种通讯方式通常是为了在源主机与企业内部其它目标主机之间进行安全可靠地数据交换。从安全性和可利用性来看,论文中所设计的这种通讯系统是比较复杂的。因此,在设计本网络时,为了取得网络的安全性和可用性之间的平衡,各项设施成本以及修复漏洞成本代价应得到改善。在寻找有效地安全性解决措施中,应综合各种不同的安全性解决方案。这些安全解决方案的商业版本是非常昂贵的,其可操作性也不是为方便用户而考虑的,它需要安全专家的后台支持。论文综合分析了信息安全的三大要素之间的关系。目的是证明和评估安全机制和网络性能指标之间的反比关系。为此,我们首先在GNS3进行模拟仿真,并进一步讨论了一些安全机制对系统吞吐量的影响。然后,对两个主机之间的TCP和UDP数据包的响应时间也进行模拟实验。再者,当多个安全机制应用到企业网络时,我们设计了一个投影方法来统计分析此设计对系统安全性能的影响。此外,我们还根据他们的功能和IT设备的大小对企业进行分类管理。而且,为了进行概念设计以及评估企业的安全要求,我们设计了一个可扩展的安全模型来帮助实现此种需求。最后,我们综合以上考虑提出不同类别的企业应给予恰当的设计模式。众所周知,为保证计算的安全性,设计一个好的安全系统对公司来说是必不可少的。然而,从策略来看,好的实践以及基本的安全性对保证一些大型企业,甚至于一些中小型企业的安全性来说是占据着举足轻重的影响地位。
[Abstract]:In enterprise management information system (MIS), the robustness of security and performance is the key factor of enterprise success. Nowadays, MIS is operated manually by different communication computer and electronic infrastructure in order to realize the common goal of enterprises. This mode of communication is usually used for secure and reliable data exchange between the source host and other target hosts within the enterprise. From the point of view of security and availability, the communication system designed in this paper is quite complex. Therefore, in order to achieve the balance between the security and availability of the network, the cost of each facility and the cost of fixing the vulnerability should be improved. In the search for effective security solutions, a variety of different security solutions should be integrated. The commercial versions of these security solutions are very expensive and not user-friendly and require backstage support from security experts. The relationship between the three elements of information security is comprehensively analyzed in this paper. The purpose is to demonstrate and evaluate the inverse relationship between security mechanisms and network performance indicators. For this reason, we first simulate in GNS3, and further discuss the influence of some security mechanisms on system throughput. Then, the response time of TCP and UDP packets between two hosts is simulated. Furthermore, when multiple security mechanisms are applied to the enterprise network, we design a projection method to analyze the impact of the design on the security performance of the system. In addition, we manage the enterprise according to their function and the size of IT equipment. Furthermore, in order to conceptual design and evaluate the security requirements of the enterprise, we design an extensible security model to help realize this requirement. Finally, we consider that different types of enterprises should be given appropriate design patterns. It is well known that designing a good security system is essential to the security of computing. However, from a strategic point of view, good practice and basic security play an important role in ensuring the security of some large enterprises, even some small and medium-sized enterprises.
【学位授予单位】：北京交通大学
【学位级别】：硕士
【学位授予年份】：2017
【分类号】：TP393.08

【相似文献】