The Information System Security Architecture Design Based Upon MAN

This article uses the general concepts and methods of open system internet security setups and the security service technical frameworks,combines with the practices of the network information system security constructions of this unit,overall and systematically discusses the designing ideology theory and method of the information system security setup for intranet. The author uses the security ideology of PDR,systematically engineering exercises the information system security risks analyses,the security demands analyses and the security planning methods. The article expounds the setup structure,certification contents,managing function,tactic management,personnel management,key management and the relevant contents of the designing and construction of the CA center of the PKI/CA public key infrastructure in detail. On the basis of this,in accordance with the demands of constructing the network system security program of this unit,systematically designs the information system security resolution plan for intranet,and delves the principles of the security product models selection and the information system security integration.