高校信息安全保障系统的设计与实现  

Design and implementation of university information security guarantee system

作　　者：曹雷 CAO Lei(China Pharmaceutical University,Nanjing 211198,China)

机构地区：[1]中国药科大学,江苏南京211198

出　　处：《现代电子技术》2021年第2期81-85,共5页Modern Electronics Technique

基　　金：国家交通部科技项目(2012-364-222-203)。

摘　　要：为避免高校隐私信息的泄露,提升高校信息存储的安全性,设计并实现高校信息安全保障系统。创建包含EUCALYPTUS云计算开源平台与云端管理平台的云计算高校信息安全保障系统,通过EUCALYPTUS云计算开源平台连接系统与应用程序,达到高校信息云计算环境的需要,采用云端管理平台的Struts、Spring、Hibernate开源框架完成系统业务逻辑层、Web服务层与数据访问层实现高校信息分析、传输以及存储等功能。系统软件通过用户、网络操控器、云操控器与底层云物理资源共同协作实现高校信息数据交互,监控高校信息,保障用户信息安全。针对系统所存在的6个脆弱点并结合不同类别信息源为系统制定自防御技术,提升系统整体安全性能。测试结果表明,该系统检测错误数据的准确性和效率较高,信息保障的综合安全属性优越,系统的综合风险较低,整体安全性能有保障。A university information security guarantee system is designed and implemented to avoid the disclosure of privacy information in university and improve the security of university information storage.The cloud computing college information security guarantee system including Eucalyptus cloud computing open⁃source platform and the cloud management platform is created.The system is connected with application programs through Eucalyptus cloud computing open source platform to meet the needs of university information cloud computing environment.Struts,Spring and Hibernate open⁃source frameworks of cloud management platform are used to complete the business logic layer,Web service layer and data access layer of the system to realize the functions of information analysis,transmission and storage in university.In cooperation of users,network controllers and cloud controllers with the underlying cloud physical resources,the system software can realize the interaction of university information data,monitor the university information,and ensure the information security of users.In allusion to the six vulnerability points of the system and in combination with different types of information sources,a self⁃defense technology is developed for the system to improve the overall security performance of the system.The testing results show that the system has high accuracy and efficiency in detection of error data,superior comprehensive security attribute for information assurance and low comprehensive risk,and can guarantee the overall security performance.

关 键 词：高校信息 安全保障 云计算 信息交互 自防御技术 系统设计 

分 类 号：TN915.08-34[电子电信—通信与信息系统] TP393.08[电子电信—信息与通信工程]