企业网络安全解决方案

[标签:标题]篇一：企业网络安全解决方案的设计摘要计算机网络的发展和技术的提高给网络的安全带来了很大的冲击,Internet的安全成了新信息安全的热点。网络安全，是计算机信息系统安全的一个重要方面。如同打开了的潘多拉魔盒，计算机系统的互联，在大大扩展信息资源的共享空间的同时，也将其本身暴露在更多恶意攻击之下。如何保证网络信息存储、处理的安全和信息传输安全的问题，就是我们所谓的计算机网络安全。信息安全是指防止信息财产被故意的或偶然的非法授权泄露、更改、破坏或使信息被非法系统辩识、控制；确保信息的保密性、完整性、可用性、可控性。信息安全包括操作系统安全、数据库安全、网络安全、病毒防护、访问控制、加密和鉴别七个方面。设计一个安全网络系统，必须做到既能有效地防止对网络系统的各种各样的攻击，保证系统的安全，同时又要有较高的成本效益，操作的简易性，以及对用户的透明性和界面的友好性。针对计算机网络系统存在的安全性和可靠性问题，本文从网络安全的提出及定义、网络系统安全风险分析，网络攻击的一般手段，企业局域网安全设计的原则及其配置方案提出一些见解，并且进行了总结，就当前网络上普遍的安全威胁，提出了网络安全设计的重要理念和安全管理规范并针对常见网络故障进行分析及解决,以使企业中的用户在计算机网络方面增强安全防范意识，实现了企业局域网的网络安全。关键词：网络安全；路由器；防火墙；交换机；VLANAbstractThedevelopmentofcomputernetworksandtechnologiestoenhancenetworksecurityisabigblow,Internetsecurityhasbecomeanewhotspotofinformationsecurity.Networksecurityisthesecurityofcomputerinformationsystemsinanimportantaspect.LikeopeningofthePandora'sBox,thecomputersystemsoftheInternet,greatlyexpandedinformationresourcessharingspaceatthesametime,willbeitsownexposuretothemoremaliciousattacksunder.Howtoensurethatthenetworkofinformationstorage,processingandtransmissionofinformationsecuritysecurity,istheso-calledcomputernetworksecurity.Informationsecurityistopreventinformationfromthepropertyhavebeendeliberatelyoraccidentallyleakedauthorizedillegal,altered,damageorillegalinformationsystemidentification,control;ensureconfidentiality,integrity,availability,controllable.Informationsecurity,includingthesafetyoftheoperatingsystem,databasesecurity,networksecurity,virusprotection,accesscontrol,encryptionandidentificationofsevenareas.Designofanetworksecuritysystem,whichmustbedonetoeffectivelypreventthenetworkalloftheattacks,guaranteethesafetyofthesystem,andalsohaveahighercost-effectiveness,operationalsimplicity,andtransparenttotheuserinterfaceandfriendly.Computernetworksystemofsecurityandreliabilityproblems,thepaperfromthenetworksecurityandtheproposeddefinition,Networksecurityriskanalysis,networkattacksgenerallymeansEnterpriseLANsecuritydesignprinciplesanddispositionprogramsomeinsights,anditwassummedup,onthecurrentnetwork-widesecuritythreatsthenetworksecurityoftheimportantdesignconceptsandsecuritymanagementnormsandagainstcommonnetworkfaultanalysisandsolutiontoenableenterprisecustomersinthecomputernetworktoenhancesafety,realizingtheenterpriseLANnetworksecurity.Keywords：NetworkSecurity；Router；Firewall；Switch；VLAN目录摘要....................................................................................................................................IABSTRACT........................................................................................................................II目录.................................................................................................................................III绪论.......................................................................................................................................11网络安全概述...................................................................................................................21.1网络安全的概念........................................................................................................21.2网络安全系统的脆弱性............................................................................................21.3网络安全模型............................................................................................................31.4企业局域网的应用....................................................................................................42网络系统安全风险分析...................................................................................................52.1物理安全风险分析.....................................................................................................52.2网络平台的安全风险分析.........................................................................................52.3系统的安全风险分析.................................................................................................62.4来自局域网内部的威胁.............................................................................................62.5来自互联网的威胁.....................................................................................................72.6网络的攻击手段.........................................................................................................73企业局域网的安全设计方案...........................................................................................83.1企业局域网安全设计的原则.....................................................................................83.2安全服务、机制与技术............................................................................................93.3企业局域网安全配置方案.........................................................................................93.3.1物理安全技术.....................................................................................................93.3.2路由器安全配置.................................................................................................93.3.3防火墙技术安全配置.......................................................................................123.3.4内部网络隔离...................................