The Security Design And Implementation Of An Online Information System Of Collecting And Monitoring Tuition

The object of online information system to collect and monitor tuition is to make the tuition policy open to the public, and collect and monitor the tuition transparently. The secure systematic development methodology, including security goal, security principles and system lifecycle management, is studied comprehensively. Based on this and by employing the secure development approach, the system to be built is thoroughly studied, its requirements analyzed in detail, and both the secure design and implementation introduced. In the system requirement phase the users requirements are analyzed in detail, the analysis results feed backed to the users in time to confirm. In the design phase it is focused on the work to be performed from the view of security. The system design is carefully planned, the security techniques which are going to be employed and the security threats which the system may be encountered are analyzed. Then the system is divided into function modules, and the data structure design, function module design, the user interface design, and so on, are performed in secure engineering approach to meet the users requirement. C# and SQL are employed as program language.The development and operation platforms are Windows 2000 ADVANCE SERVER, ASP.NET and MS SQL SERVER 2000, and the operational model is B/S. The system has passed the acceptance test, deployed in field, and put into operation.