Large-scale Enterprise's Online Security Problem And Solution

The explosive growth of Internet has been leading a foundamental change for human civilization. The network has become the crucial resource of country including political, economic and military, and turn to the new symbol of national strength. Meanwhile, developing the network technology has also become an indispensable condition for national economy modernization. Whether we can hold the opportunity that brought for the development of China by network will directly influence the survival of China in 21st century. But its side effect is arising with the expanding application of network. It has been possible that the hacker or industrial spy as well as vicious invador infringe and manipulate some important information through network, thus bring on the problem of network security. In this paper, we propose the security requiement of network for large-scale distributed enterprise, and discribe how to resolve the inner network security and application security, which can be used as reference model similar to the resolve scheme for security requirement.Firstly, we present a overview of the research background as well as the progress and status of network security, introduce current network security techniques, and give the summary and status description for large-scale enterprise's network security..In chapter 2, we present a review of the network freamwork mode in the network sucurity system of large-scale enterprise, and describe the flux of its application mode along with its various applications in the enterprise. In chapter 3, we propose the effective security requirement for large-scale enterprise network including network layer and application layer, and put forward the design goal for large-scale enterprise's network security.In chapter 4, based on the above discussion, we present the final resolve scheme design for network security. In the design of the solution, it has fully absorbed the quintessence theory of systematic engineering during the system construction, and considered the entire system security problem from the whole system's point of view. Through the reasonable partition in the network layers and security domain, this scheme provides depth defense to attack in the aspects of supporting infrastructure, network border and LAN running environment. In the solution design, we employ the intact solution scheme base on the "networkdynamical isolation and the technology of access control" theory, and resort to credit system, LAN computer safeguard to ensure the implementation of security goal for large-scale enterprise's network security. In the application layer's security scheme design, we propose a novel application which use proxy Server (WebST) to settle the security requirement in the application layer, and indicate that integrate WebSt with current system to save the enterprise resource to the most extent.We conclude the whole paper in Chapter 5, and with a brief discussion of the application prospect and future application directions.