Research On Network Isolation And Secure Data Exchange Prototype

With the rapid development of Internet technology, the network and information technology is more and more widely used in many fields, ranging from traditional small-size application to larger and more crucial systems such as e-commerce and e-governance. Traditional network security technologies, e.g. firewall, only provide the inner network with limited protection. Copying data with medium can't guarantee the efficiency of information exchange ether and even can't provide strict check-up on information security. It leads the afflux of aggressive code and the leak of important information.Oriental by the fundamental function requirements of Network Isolation and Secure Data Exchange, an archetypal system, based on multiple-layers network security architecture, was designed and developed. The main contribution is as following:1) Based on the research on network security's actuality and some network security proctection technology, the paper analysizes the principle of Network Isolation and Secure Data Exchange, including its unique advantages to proctect key business system and important data.2) A multiple-layers network security architecture was designed to avoid the direct physical connection between the inner network and external network, which effectively implements the secure isolation between the two networks. Besides, all systems are independent from each other, which avoids that the risk diffuses from one system to another.3) Based on the content-filtering and access-control mechanism, the controllable channel between the inner and externer networks was builded. It supports customized security policy configuration and fine control opinions on the channel.