基于准入控制技术的企业网络安全的分析与优化

发布时间：2018-08-25 07:52

【摘要】：国内金融企业的信息化发展在过去的二十年里发生了翻天覆地的变化,经历了一个从简单到复杂,从局部到全面的发展过程。这二十年的发展,由计算机技术及网络技术所构建的信息平台已经成为金融企业正常运作的基础。金融企业网络的高可靠性要求,一般在其核心网络设计和规划时就会予以考虑,而且都会有很具体的量化的指标进行评估,而网络的安全问题却始终是纷繁多变,难以彻底解决。不断变化的病毒、不断出现的系统漏洞,这些不断变化着的安全问题是网络安全管理中始终必须予以关注和考虑的部分。解决企业网络安全问题,不存在着一劳永逸的方法。准入控制是一种全新的安全防护技术。它通过对用户终端实施的有效控制,来解决因终端不安全访问所带来的网络安全问题。准入控制技术目前还有标准的定义,它不是特指某一种技术,而是由一系列用于保护终端和网络的安全技术所共同构成的集合。其核心技术就是从终端的安全控制入手,通过多种安全技术协同,消除所有不安全或不确定的因素,从而达到保护网络安全的目的。本课题通过以金融企业网络现状为模型,对准入控制技术理论及基本特点进行了阐述。通过分析企业不同网络层次、不同接入方式、不同业务应用的需求,展开以802.1X协议为主体的准入控制技术的应用研究,提出以802.1X准入控制技术为基础的准入控制方案。对准入控制方案中的网络结构、身份认证方式、安全策略做出了具体研究。特别是对准入控制技术在金融企业无线局域网及无线广域网应用环境下存在的问题进行分析和研究。针对802.1X准入控制技术在这两种无线应用环境下,存在的接入安全和设备认证困难的问题,通过结合L2TP、IPSEC、WAP2等接入安全技术及数字证书认证技术,提出自己的解决办法,设计出应用方案。本课题最后以该设计方案为基础,通过对大量的市场调研,对市场主流产品进行研究和评价,选出最为合适的产品。并根据设计方案制定项目实施细则,进行实际应用,解决企业的安全问题。
[Abstract]:The information development of domestic financial enterprises has changed dramatically in the past twenty years, and has experienced a development process from simple to complex, from local to comprehensive. With the development of these two decades, the information platform constructed by computer technology and network technology has become the foundation of the normal operation of financial enterprises. The high reliability requirements of financial enterprise network are generally considered in the design and planning of its core network, and there are very specific quantitative indicators for evaluation. However, the security problems of the network are always complicated and changeable. It is difficult to solve the problem completely. The ever-changing viruses and system vulnerabilities, which are constantly changing security problems, must always be paid attention to and considered in the network security management. There is no way to solve the problem of enterprise network security once and for all. Access control is a new security protection technology. It solves the network security problems caused by terminal unsafe access through the effective control of user terminal. At present, there is a standard definition of access control technology, which is not a particular technology, but a collection of a series of security technologies used to protect terminals and networks. Its core technology is to start with the security control of the terminal and eliminate all unsafe or uncertain factors through the cooperation of various security technologies so as to achieve the purpose of protecting network security. Based on the current situation of financial enterprise network, this paper expounds the theory and basic characteristics of alignment control technology. By analyzing the requirements of different network levels, different access methods and different service applications, the application research of the access control technology based on 802.1X protocol is carried out, and an admission control scheme based on 802.1X admission control technology is proposed. The network structure, identity authentication and security strategy of the control scheme are studied in detail. Especially, the problems existing in the application environment of WLAN and WWAN in financial enterprises are analyzed and studied. In view of the problems of access security and equipment authentication of 802.1X access control technology in these two wireless application environments, this paper puts forward its own solution by combining with access security technology and digital certificate authentication technology, such as L2TP / IPSECWAP2, etc. The application scheme is designed. In the end, based on the design scheme, through a large number of market research, market mainstream products are studied and evaluated, and the most suitable products are selected. And according to the design program to formulate project implementation rules, practical application, to solve enterprise safety problems.
【学位授予单位】：福州大学
【学位级别】：硕士
【学位授予年份】：2014
【分类号】：TP393.08

【相似文献】