| Along with the development of market economy , The computer information system of Industrial and Commercial Bank of China (ICBC) has developed enormously. In order to keep ahead in commercial competition, ICBC must start to build the universal network platform. The new network platform will be able to support the new application, maintain the services level and meet the new security standards of ICBC. With the centralization of data and applications, ICBC must face the challenge to establish a high available, high reliable, secure and manageable network system. How to build and run the banking system securely has become the emphasis of the developments of all banks.Under the direction of the theories of information system safeties, with the method of system analysis and comprehensive balance, and through the research and analysis for network risk faced in process of construction of bank' s computerization, this thesis systematically puts forward the requirements of network system security and the safety design principle in bank; On the basis of above, combining with the new generation integrated business system of ICBC (Industrial and Commercial Bank of China) and data concentration engineering, with the guidance principle of the unity between network' s opening and security, the author brings forward the network security solution for ICBC, Qingdao brancho This solution is based on the practical requirement and technique practice of network reforming in ICBC, and it can be the guidance of constructing network platform and putting the network safe strategy in the process of carrying forward the new generation integrated business' s system and data concentration engineeringoThis paper is divided into five parts. The first part is the foreword, in which the cause and meaning of network reconstruction is introduced. The second part is the brief introduction of information system safety, in which the conception of information system security is introduced. In the third part, the security analysis , the safety design principle of network system used in ICBC, Qingdao branch, the frame of the bank, security analysis, security needed analysis, safety design principle are introduced in detail. And the network technology, especially the antivirus software, the detective method and antivirus system are introduced in emphasis. In the forth part, the inter-network security control and ACL method used in the business bank are introduced. And the safety rank, the set-off of safety field, the safety design principle used in the inter-network and the set-off of VLAN are introduced in detail. In the last part, the out network and scheme of network are introduced in detail. |
