计算机网络中涉密信息系统安全控制方案设计与实现  

Design and Implementation of Security Control Scheme for Secret-related Information System in Computer Network

作　　者：沙艳鑫 Sha Yanxin(JiLin Vocational and Technical College,Longjing,China)

机构地区：[1]吉林职业技术学院,吉林龙井

出　　处：《科学技术创新》2023年第22期87-90,共4页Scientific and Technological Innovation

摘　　要：本文采用“四纵两横”架构设计了涉密信息系统安全控制管理体系,该体系由物理层、网络层、系统层和应用层四部分组成,采取预防性和检测性两种安全控制模式,切实保障了涉密信息系统的运行安全。安全控制方案借助于一系列主流安全产品实现其功能,如物理层的电磁屏蔽机柜、网络层的入侵检测和管理系统、系统层的脆弱性扫描和管理系统以及应用层的内网审计系统等。This paper uses"four vertical and two horizontal"architecture to design the security control management system of classified information system.The system consists of four parts:physical layer,network layer,system layer and application layer.Two security control modes of prevention and detection are adopted to effectively ensure the operation security of classified information system.The security control solution relies on a series of mainstream security products to realize its functions,such as electromagnetic shielding cabinet at the physical layer,intrusion detection and management system at the network layer,vulnerability scanning and management system at the system layer,and Intranet audit system at the application layer.

关 键 词：计算机网络 涉密信息系统 包过滤防火墙 CIDF模型 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]