| With the popularization of Internet and development of campus network, manyuniversities and colleges have built their campus network. It has become the important part of the information system in the universities and colleges. The problemof network security could not be ignored, and how to protect the data and system inthe opening network environment has become a more and more important andimminent question. So the establishment of a network security system is crucial and it involves aspectsfrom the hardware to the software of the system, from computer to network. In this paper, the concept of network security is introduced, and various threats confrontingthe campus network are also discussed. Security structure of OSI are also examined, Along with require of campus security system,Computer network system should be a system of dynamic defense, both dynamic andstatic, passive as well as active, combined with management and technology. Basedon such a concept, the author has developed an all-round, mufti-level model of network security system with different defendable capabilities, which covers the whole campus. Then, it analyses the integer solution of campus network security, which is classified as physical security, access controlling, security audition, virus protection, network traffic flow monitoring system and security management, etc.Lastly, along with campus fact and equipment,this paper brings a new thought that IDS and firewall can work together in ouruniversity network. IDS will be a good complement to firewall and firewall can findintrusion by using intrusion detection. IDS which is designed in my paper is based onmisuse IDS. I produce a characteristic storeroom aim at the traditional intrusion in our network .IDS will alarm when it detect the action the same as the character. So theaction must pass the thin grain of IDS after the wide grain of firewall. We carry out security defense of campus network entirety, using technology of VPN, WEB,virus protection. |
PDF Full Text Request