A Design Of The Info-Sys Security Solution Of One Organization

With the widespread of the Internet technology, the information system construction and applications based on internet technology have been constantly developing quickly both in depth and width. Such development in IT induces many security problems and attracts many concerns.XX 's internal office system shares resource with Internet information system. The internal network can interface with WAN (wide area network), which widens its communication with many other enterprises in the network. Because information in the network may be related to national security, the security architecture of such network differs from regular governmental or enterprise networks in many aspects. The major characteristic is its closure property. Thus its network structure is relatively self-contained, however such closure is not absolutely isolated. Many external events can seriously affect its security. A design of the security system for the internal network is presented in this thesis. First, the threats and risks that the internal network faces are analyzed, then the security requirement are put forward. Based on these, a complete design of the security solution is given, including network security design, design of application system security, physical security design, security management, design of safe network interconnection, and etc.