Security Defense System Of Campus Network

With the popularization of Internet and development of campus network, many universities and colleges have built their campus network. It has become the important part of the information system in the universities and colleges. The problem of network security could not be ignored, and how to protect the data and system in the opening network environment has become a more and more important and imminent question. As an open system, it has to face up to various threats and attacks. So the establishment of a network security system is crucial and it involves aspects from the hardware to the software of the system, from computer to network. In this paper, the concept of network security is introduced, and various threats confronting the campus network are also discussed. Security structure of OSI and the dynamic security model- P2DR, Include security analysis of risk, requirement, strategy and target etc, are also examined. Along with require of campus security system, Computer network system should be a system of dynamic defense, both dynamic and static, passive as well as active, combined with management and technology. Based on such a concept, the author has developed an all-round, multi-level model of network security system with different defendable capabilities, which covers the whole campus. Then, it analyses the integer solution of campus network security, which is classified as physical security, access controlling, communication secret, security audition, virus protection, network traffic flow monitoring system and security management, etc. Lastly, along with campus fact and equipment, using technology of VLAN, NAT, router access-list and network traffic flow monitoring system, we carry out basic security defense of campus network.