Research On Enterprise Distributed Security Defense System

We are now in the era of information society. With the global information superhighway being more and more mature, large-scale and distributed information system are setting up at large and society informatization is in rapic development. Hence, the adoption of computers is promoted to an interconnected form. In such network distributed information systems, information security issues are no longer considered with respect to single security functionality, mechanisim, or boundary;Security and privacy should now be taken into account on an overall basis of systematic infrastructure.Enterprise networks are regarded as one system engineering in this dissertation. The author started with studing enterprise networks security theories to put forward information security nerve system theories, according to lay figure engineering. In this part, the author designed distributed security defense system, and expounded the engineering excuting and ensuring project. The mode is based on SSE-CMM(System Security Engineering -Capability Maturity Model ) and "technology & implementing & ensuring "pattern advocated by CNNS. At the same time, some current security applying technics, products and services are synthesized to form enterprise distributed security defense system. All the content above is expected to figure out referenced model of security defense system frame founded on the distributed enterprise networks environment.In this dissertation, the author takes a certain enterprise network as a special case to study the implementation of a distributed defense system. We look into the enterprise network's features, analyze existing security risks, and then build up a full mechanism for security managing. In the security engineering practised, firewalls, intrusion detection systems, and other advanced security devices have been deployed. Our securiy engineering mainly focus on network-layer security issues, but it may also serve as a basis of solving the enterprise netwok's system-level, application level, and management level issues in the future.