The Security Solution And Its Realization Of Sichuan Normal University Information System

An information system in Sichuan normal university has been built for computer connection and information sharing in campus based on the advanced technology of computer and communication, and some transaction application system based on B/S and C/S has exploited .The primary task of the updating the information system is building a perfect security structure.The author introduces the components and structure of the information system, analyzes the security risk of the information system related to the physical layer, data link layer, network layer, application layer, the leaks of operating system and management , proposes the security requirement and security goal of the information system .and designs the security plan. This security plan satisfies the security requirement on three aspects. .First ,the security plan satisfies the need of physical security . Second ,a security assurance technical framework has been established based on isolation and access control , security assurance of network transportation and intrusion detection system .Finally, a security assurance framework of transaction application system has been established through improving the security of operation system, providing data-backup and disaster-recovery, offering virus detection and supporting monitoring and audit the resource of transaction sub-network .The author gives a scheme for how to implement the security plan gradually.The security plan has been implemented in the network of Sichuan normal university. The network operation shows that the security plan designed is reasonable ,and accords well with the requirement of security.