Design And Implementation Of Enterprise Information Security System In LAN

Computer and networks have become the important information carrier and transmission channel for enterprises. When people are enjoying the convenience of computer and networks, the hidden trouble in security appears. Especially great loss of enterprises caused by the interior important information divulgence happens frequently. Therefore, it is very important to take action to protect it. This management system is established to guard the computer information in enterprises and provides an effective and reliable management plan for information security in LAN.The thesis contains the meaning and development situation of the topic and summarizes the technology on security of computer information. Based on the detailed system requirement analysis, a general structure with the foundation of C/S pattern is designed, systematic design thought and work flow are discussed, module divide and design are carried out. The COM and OOP are used, which enhance the system's robustness and expansibility.Screen record module, sniffer module and access control module of the removable storage device etc. compose the core module of the system's security. Screen record module research on the technology to gain and compress screen images thoroughly, finishes recording the screen images of computer operation. That provides reappearance of operation behavior for the administrator analyzing security problems, and it will clue information in the event that the gaff is blown. Sniffer module finishes the capturing of bottom packets in the network with the help of WinPcap, the protocol analyzing based on the theory of TCP/IP, and the protection of holding up the trespasser in LAN through ARP cheating. Access control module of the removable storage device prevents copying files from computer peripheral equipment through a file filter driver attached on the file system of the Windows OS which can head off requests of accessing the removable storage device.Several technologies, such as network correspondence, image manipulation, sniffer and filter driver are adopted synthetically to implement the enterprise information security system in LAN. Nowadays, the system has been carried out stably in many enterprises and solves the information security problems in LAN effectively.