计算机系统安全思考与对策  

Security Strategy for Computer System

作　　者：楼洪锋[1] 吴自恒[1] 郑定良 王维博[1] 

机构地区：[1]四川工业学院电子信息与电气工程系,四川成都610039 [2]银湖信息有限公司,四川成都610000

出　　处：《四川工业学院学报》2003年第1期24-27,共4页Journal of Sichuan University of Science and Technology

摘　　要：传统的安全措施往往是仅利用网络操作系统、数据库系统及应用系统所具有的认证、授权及访问控制等措施对信息系统进行安全防护 ,这些措施是静态实施的 ,许多安全漏洞都没有考虑进去 ,网络信息系统仍存在极大的风险。本文作者结合对证券公司系统安全方案的系统设计 ,从多环节、多层面上进行安全剖析 ,并提出了相应的对策。The traditional measure for security of computer system is only static,and many system defects are not considered,because usually,the companies only take the measures such as the authentication ?authorization?access control from the operation system ?DBMS and the application program So a lot of risk still lurk in information system.With the experience on the computer system security design for securities company,the authors present his view points on the basis of the comprehensive anatomy on the typical information system

关 键 词：计算机系统 网络 操作系统 数据库系统 中间件 数据 病毒 安全防护 

分 类 号：TP309[自动化与计算机技术—计算机系统结构] TP393.08[自动化与计算机技术—计算机科学与技术]