企业网络安全毕业设计

云南工商学院

学生毕业作业（设计）

山东香山装饰工程企业网络安全部署设计

（硬件方向）

设计小组

二级学院机电信息学院

专业计算机网络技术专业

年级11级

班级网络技术一班

学号11013200001

姓名郭台

指导教师何斌颖

职称讲师

2013年12月2日

山东香山装饰工程企业网络安全部署设计（硬件方向）

［摘要］于这几年由信息化技术的飞速发展，许多有远见的企业都认识到计算机网络信息安全在国民生活中受到越来越多的关注，原因在于：许多重要的信息存储在网络上，一旦这些信息泄露出去将造成无法估量的损失。之所以网络信息会泄露出去，一方面有许多入侵者千方百计想“看”到一些关心的数据或者信息；另一方面网络自身存在安全隐患才使得入侵者得逞。针对这些问题，该文归纳并提出了一些网络信息安全防护的方法和策略。

重点研究在物理隔离的情况下计算机网络的安全问题。在对网络系统有了确切的了解之后，将局域网总体划分为三个安全等级，每个等级中包含若干子网，各类子网设置了各自的安全策略。按照计算机网络安全设计的目标及其计算机网络安全系统的总体规划，对计算机网络安全问题进行了全面的分析。依照各个安全等级的安全需求，设计了网络的安全方案。在满足各子网系统建设的前提下，提出了包括病毒防护、动态口令身份认证、安全审计管理、访问控制、信息加密策略、入侵检测系统的部署、漏洞扫描系统等管理措施和安全技术在内的整套解决方案。目的是建立一个完整的、立体的网络安全防御体系，使网络安全系统真正获得较好的效果。

［关键词］网络安全扫描系统防火墙病毒入侵网络威胁安全防范措施。

Shandong Xiangshan decoration engineering enterprise network security deployment design(hardware)

［Abstract］Because of the rapid development of information technology in the past few years,many forward-looking companies recognize that the computer network information security is paid more and more attention,in the national life reason:many important information in the network,if the information leaked would cause immeasurable losses.The network information will leak out,on one hand many invaders make every attempt to"look" to some concerned data or information;on the other hand,the network's own existence safety hidden danger makes the intruder.Aiming at these problems,this paper summarizes and puts forward some methods and Strategies of network information security protection.

Safety issues focus on the physical separation of the cases of computer network.To have a precise understanding of the network system,the LAN is generally divided into three security levels,each level includes several sub network,all kinds of network to set up their security strategy.In accordance with the overall planning and design of computer network security goal and security of computer network system,the security of computer network are analyzed. According to different security level security needs,design the security scheme of network.In order to meet the system construction of each sub network,including the proposed virus protection,dynamic password authentication,secure audit management,access control, information encryption,intrusion detection system deployment,vulnerability scanning system and other management measures and safety technology,set of solutions.The purpose is to establish a complete,the three-dimensional network security defense system,so that the network security system truly achieve better effect.

［Keywords］network security firewall virus scanning system network threat security measures.