The Study Of Beijing Education Examine Center's Network Security Architecture

With the development of computer network and Internet, information globalization has been leading the growth of human society. Computer network has been characterized by features like heterogeneous connection, uneven dispersiveness and openness, which also result in its vulnerability to be attached by hackers, malicious unauthorized intrusion. That's why network security has been attracting people's attention in various fields. Intranet is the largest party of Internet society. Therefore, it is very important to solve network security and information security in Intranet. It will be an academically meaningful topic to design a Internet security solution which ensure old intranet and information security with the existing technologies. To ensure network usability, At the same time, To protect network security, This paper has done a series of research on the design of Intranet security of BeiJing Education Examine Center as follows:1. Introduce some prevalent Intranet attack. Intranet attack include: Information-detector, IP-deceive, DoS, Password-attack, man-in-the-middle-attack,Application layer attack, Network reconnaissance, Trust Exploitation, Port redirection,virus. It is helpful to obtain complete and distinct security requirements with Intranet security risk analysis.2. Introducing Intranet security resolvent's goal, principia, constitutes and keystone. 3. From the point of intranet security view ,I divide network into eight module: Management Module, Server Module, Core Module, Department Distribution Module, Department Entry Module, Edge Distribution Module, Corporate Internet Module, VPN and Remote Access Module. Analyze all attacks by any possibility from those modules, take measures to reduce or avoid.4. Certificate Authority and Intrusion Detection. 5. Analyze network of BeiJing Education Examine Center with modules, design a Internet security solution to protect its security.