The Study And Construction Of Security System Of WISDRI Information System

The buildup of information network security system is a complex systematic project. It involves a variety of factors such as security organizing framework, security technique, and security management regulations. In this thesis the company network security requirements based on the WISDRI's secrecy requirements for information setup and application and via analyzing the in being status quo of information system security and existing risks earnestly is presented, and improvements and reinforcing design for the company's internal networking security based mainly on the study of security strategy, security technique and security management, combining with the relevant networking security products, and measurement of two phases implementation are also introduced. The first phase construction of company networking security determined the organizing framework of security management, established integrated security strategy and networking security management system, and solved the problem of uniform defense and concentrated control for the whole network virus, and the problem of accessing control of the important networks and networking servers by combining with corresponding security technique, anti-virus technique, firewall technique, access control technique, data backup, and risk evaluation technique, etc, and implemented the security defenses for the weakest level (Internet access security) and kernel level (LAN of servers) in the system. By summarizing the implementation and practice in the first phase project, we accumulated some practical experiences and established a stable basis for the company's internal network construction.