Research And Implementation Of The Security System Of IPNET

IP carrier Network (IPNET), which can cover all the areas of the country, is based on IP technology. It is not only the carrying network of the core voice services, but also the carrying network of other core systems (e.g. the office automation systems, Business & Operation Support System and the mobile value-added application systems).For a network which carries a large numbers of core services and covers over 300 cities and places, the flexibility and the openness of IP technology may also bring some negative impact. For example, traffic of all the networks can be triggered by changes in any single network parameter. While the efficiency of network operation is being improved, a wide variety of security risks are also threatening the secure production of network. It has been found that the factors leading to security accidents may vary, including equipment failure, technical defects and operational mistakes.Therefore, a feasible and effective security system to analyze and tackle various aspects of security risks is needed, in order to ensure that the network can run properly.This thesis firstly illustrates the security issues of networks and the needs for a security protection system, based on the actual experience of maintenance work. It also deeply analyzes such typical security events as security risk of network failure, abnormal traffic risk and security risk of malicious attack. Secondly, it describes the IPNET security system architecture and its six layers including physical layer, Link Layer, signaling layer, service layer, operational layer and system. This architecture was designed by considering some design principles such as integrity, flexibility, reliability and consistency. The security issues at each layer and the aim of the research are also presented.Finally, the process of the implementation of the security system in IPNET networks is explained.The requirements and solutions related to the six layers are described, respectively. These are listed as follows:the needs in equipment hardware, network construction and port design at physical layer.the needs in transmission protection and node protection at link layer.the needs in routing plan and encryption at signaling layer,the needs in service separation, service access at service layer.the needs in network management protocol and equipment protection at the operational layer.the needs in log auditing and personnel management at the system layer.To ensure all tasks keeping maximum possibility to be executed smoothly, this document also gives a routine inspection plan as detailed as command level which based on the real IPNET devices, to make sure that whole design may be implemented successfully on the current running business network.