Security Analysis And Solving Schemes On Computer Information System In Securities Field

I. Components of IT system in securities industryThe network system for securities industry constitutes of three parts: outward network system, inward network system and operation system.The outward network system refers to the various network systems which are outside but connected to the network of the operation departments.The inward network system is used to provide marketing information and exchange services for customers inside the operation departments, which includes LAN system inside the operation department and sometimes the office system which is connected to the headquarter.The operation system means the main service system offered to customers, which includes marketing system, exchanging system, connecting and transferring system between banks and securities industries, on-line exchanging system, other periphery exchanging systems and inside OAS, etc.II. Security analysis on securities IT system This paper analyzes the security performance of the complex and interacted securities IT system from three aspects: network system, software system and operation system.The security of network system as a whole is reflected by the combination of the security performance of five main security entities: host computer, network access, data communication, on-line exchange and office network.The security of software system embodies the stability, healthiness and anti-attack ability of the operating system and internet applications system.The security of E-exchanging system includes the security performance of exchanging means such as the connecting and transferring system between banks and securities industries, telephone consignment and long distance consignment, etc. III. Solving schemes for the security of securities network and operating system The paving and security defending of the network system for securities industries are closely connected to the operation system. Therefore, it is meaningless to discuss the security of network system putting aside the operation system and impossible to understand the ultimate purpose of security setting.Principles of establishing security system:● enforceability principle: it is the base for risk analysis and demand analysis.● administrability principle: establishing a set of reasonable safety criterion.● maturity principle: the same as safety, the safety system includes several levels.security hierarchy:● security of physical layer: includes safety of communication lines, physical instruments and machine room, etc.● security of system layer: it originates from the operating system adopted by the securities companies: Windows 2000, Windows 2003.net,Windows NT,Windows XP and Novell Netware, etc.● security of network layer: it is mainly reflected by the security of network information.● security of application layer: it concerns the internet applications and data base systems used by the securities companies to offer services to customers.● security of management layer: it includes security techniques, equipment management, security management regulations, organizational regulations for departments and staffs.establishing multi-layer safety defending systemsafety models for securities networkIV. Solving schemes for the security of software system Software is the soul of all hardware facilities and network system. The software functioning on the flat for securities business includes operating system, data base system and internet applications system. The operating system refers to Novell Netware 4.11 which works on market services servers, Windows 2000 Server which works on capital server and other services servers, and IOS which works in switchboard and Routers.security schemes for Netware system Netware is a distributed operating system constitutes server, workstation, connecting facilities and network medium. Server serves for every workstation which is connected to Netware system through network medium. The security schemes for Netware includes network and software protecti...