A Study & Design Of The Railway Computer Network Security Engineering

Research and Construction of Sino-Rail Information System Security Architecture" is a important project initiated by the Ministry of Railway in 2002-2003. The purpose of the project is analyzing the current status of the information system, finding the limitation, and constructing the security architecture for the information system.The project has a very comprehensive researching scope, the author of this thesis was in charge of these sub-projects: network security architecture; regulation for IP network infrastructure; dynamic isolating of network; access control and defending of virus; security mechanism for dialing network. Based on the project implementation, the article comes from the practicing work. In the article, the author analyzes the current status of the railway computer network system , sums up the security requirements and the purpose of the project. Referred to the current security technique and the result of the test of the network's security, the author gives out a feasible solution of the network's security . The solution is a part of the report on the feasibility research on the railway information network security engineering. The report is the project requisition and acquired the approval from the Ministry of Railway.