高等院校多层次安全防御体系设计与实现

发布时间：2018-04-20 16:47

本文选题：网络安全 + 多链路出口　；参考：《大连理工大学》2016年硕士论文

【摘要】：随着高等院校网络用户规模增大,网络威胁藏时间更长,破坏能力更强,传统的网络安全防御技术已经无法满足人们的需求,需要采用具备预警、保护和反击能力的多层次主动安全防御系统,提升网络安全防御性能。本文首先详细的分析了网络安全研究背景,阐述了高等院校网络安全防御国内外研究现状,归纳了现存主要问题,提出了解决方案和思路。其次,本文分析了高等院校多层次网络安全防御体系研究过程中采用的技术,分别是VPN技术、ROST技术、VLAN技术、RAID技术、HSRP技术和NAT技术等,有效的保证了高等院校构建动态、多层次、高强度安全防御体系。接着,论文针对高校网络安全管理防御需求分析,并且导出了相关的逻辑业务功能,从网络出口设计服务、可靠性网络设计服务等方面进行了设计与研究,进一步提升了网络安全管理性能,满足高校网络安全防御需求。再次,论文针对高校多层次安全防御系统进行了设计,构建了一个强大的网络安全防御性能,并且设计了网络安全防御设计思路,从多个方面构建了网络安全防御功能,每一个功能都进行了算法流程设计,具有重要的作用和意义。然后,论文设计了一个多层次、动态的安全防御体系,给出了相关的IP地址规划内容,采用冗余备份、IP SEC、防火墙和主动防御等技术给出了一个综合的防御体系,提高了高校网络安全防御能力。最后,针对高校多层次网络安全防御系统进行实验和测试,从多个方面验证了系统的运行效果,能够满足高校多层次网络安全防御的自动化管理、智能化配置需求,提高高校网络安全防御性能。高等院校多层次安全防御体系可以及时响应安全威胁需求,提高网络安全防御能力,满足现代化高校协同办公需求,提高学校的信息化安全防御性能,具有重要的作用和意义。
[Abstract]:With the increase of the scale of network users in colleges and universities, the network threat is stored for a longer time and the ability of destruction is stronger. The traditional network security defense technology can no longer meet the needs of people, so it is necessary to adopt early warning. Protect and counter-attack the multi-level active security defense system to improve the network security defense performance. Firstly, this paper analyzes the research background of network security in detail, expounds the current research situation of network security defense at home and abroad in colleges and universities, summarizes the existing main problems, and puts forward the solutions and ideas. Secondly, this paper analyzes the technologies used in the research of multi-level network security defense system in colleges and universities, which are VPN technology, VPN technology, VPN technology, raid technology, HSRP technology and NAT technology, which effectively ensure the dynamic and multi-level construction of colleges and universities. High strength security defense system. Then, the thesis analyzes the defense requirements of the network security management in colleges and universities, and derives the related logic business functions, designs and studies the network exit design service, the reliability network design service and so on. Further improve the performance of network security management to meet the network security defense requirements of colleges and universities. Thirdly, the thesis designs the multi-level security defense system in colleges and universities, constructs a powerful network security defense performance, and designs the network security defense design idea, and constructs the network security defense function from many aspects. Each function has carried on the algorithm flow design, has the important function and the significance. Then, a multi-level and dynamic security defense system is designed, and the related IP address planning content is given. A comprehensive defense system is given by using redundant backup IP SECs, firewall and active defense technology. The network security defense ability of colleges and universities is improved. Finally, the multi-level network security defense system in colleges and universities is tested and tested, which verifies the running effect of the system from many aspects, and can meet the requirements of automatic management and intelligent configuration of multi-level network security defense in colleges and universities. Improve the performance of network security defense in colleges and universities. Multi-level security defense system in colleges and universities can respond to the demand of security threats in time, improve the ability of network security defense, meet the needs of modern colleges and universities, and improve the performance of information security defense. It has an important role and significance.
【学位授予单位】：大连理工大学
【学位级别】：硕士
【学位授予年份】：2016
【分类号】：TP311.52;TP393.08

【相似文献】