Research And Realization On Network System Security Strategy For Agriculture Bank

With the rapid development of information technology and network technology, financial transactions appear increasingly with the feature of network, systematization, speediness, currency-numeralization. All above bring up restrict requirement on system security of financial information system. After analysis on the merits and shortcomings of current network technology, this paper designs network system security for Agriculture Bank, it is based on current state of network security. In this paper, network system is partitioned into three parts: production network, office automation (OA) network and test network, of the three production network is to be primarily protected, while to OA network and test network, emphasis is put on boundary security. External interfaces of three networks are confirmed, according to difference of respective controllability, different risk rank are labeled, which are equivalent to diverse countermeasure. Virtual local area network (VLAN) technology is employed, and VLAN division rule is set down, logic division is done on production network;According to different case, corresponding fire wall technology is adopted, and what's more, fire wall is set on external interfaces and internal networks. Security assessments are carried through on important network equipments, resource, and security equipments. According to the type of network to be protected, boundary protection system adopted and different protection rank, the mode of entering into detection system is ranked either. What's more, according to design theory and methods of network invading, adopt several mature invading detection system technology, reference to a large quantity of source code of invading detection system in business rank, develop language with PERL, in the system of Linux from Agriculture Bank , with background of RedHat, a network invading detection system is designed and fulfilled.