The Design And Implementation Of The Information And Network Security System Of Shanghai Municipal Public Security Bureau

As information technology and network technology are continuously developed, Network applications have been adopted by many industries and fields. As a result, the issues of network management emerge. We are increasingly faced by issues as how network security issues could be well managed, how network faults could be effectively located and solved and how we can project and clean up potential security vulnerabilities.Shanghai Municipal Public Security Bureau Network, which has been developed for years, has already been built as a high speed intranet across the city, on which several applications have been implemented. These information management systems, leveraging network, help the bureau to crack criminal cases and administration management greatly, which dramatically improve the efficiency and quality of Shanghai Municipal Public Security Bureau. However, potential security issues and vulnerabilities in the public security network are constraining the further adoption of information network and applications in future. It is very urgent now to build a systematic infrastructure to make sure Shanghai Municipal Public Security Bureau security of information and communication network over.This paper analyzes the security background and security requirement of Shanghai Municipal Public Security Bureau information and communication network. By building security architecture model, several key problems and technologies in network security, as communication platform, network platform, system and application platform and security administration are stated and discussed. The design and implementation of each platform are probed. And the security solutions, which meet the requirement of Shanghai Municipal Public Security Bureau information and communication network are well explicated, from network platform and system and application platform point of view.Physical security and data link layer security, in the communication platform, are analyzed, as the infrastructure of network security. The security requirements in machine room, wiring and environment are stated.Based on security domain, from access control perspective, firewall technology and attack detective are discussed, especially the highly emphasized"one machine, several usages"issue in public security network is studied. Deployment methodology of each kind of security system is proposed.In system and application platform section, virus preventing, authentication, access control, leak scanning, data redundancy and replication are discussed. Regarding how current information systems could be improved after security authentication and access control are implemented, one solution is advanced.In administration platform section, how administration and technology could be well combined is discussed from macro administration point.The whole solution of security infrastructure of Shanghai Municipal Public Security Bureau information and communication network advanced here is very crucial to grantee the classification , consistency, usability, controllability and auditability of Shanghai Municipal Public Security Bureau information and communication network. Also it is a valuable reference for the development of public security network in other areas across the country.