The Research And Realization Of Campus Network Defense In Depth System

Network security issue has become even more important with the extensive application of computer network technologies. As a open system, computer network is faced with the threat and attack may come from any direction. This thesis analyzes the status of the campus network, and puts forward a defense-in-depth network security system, which is set up by multiple security technologies. According the current development trends, research in this area will attract more and more attention.First, the author improves the PPDRR(Policy, Protection, Detection, Response, Recovery) model, and brings forward a theory of three-dimensional PPDRR, which is omnidirectional, dynamic, and in time adapting to the state changes of network security. Based on that, the author puts forward the defense-in-depth security system model for campus network, and carries out the deep protection from outside to inside of the campus network, through the division of the campus network security domain, thereby achieves the security maximization of the campus network.Finally, puts forward the defense-in-depth security system for campus network, it makes use of multiple security technologies synthetically; Including the deployment of firewall, anti-virus / Trojan horse strategy deployment, SSLVPN technology deployment, the use of honeypot technology, billing systems to achieve encryption, network status monitoring, redundant data backup, security management deployment.To enable them not only play their own advantages, but also complement each other simultaneously. Multiple security technologies in the joint defense for campus network, which fully embodies the concept of defense-in-depth and achieves the defense effectively for the entire campus network. In conclusion, the author takes the case of Jiaotong University campus network, to discuss the implementation of defense-in-depth security system for the campus network, and present implementation methods of key technologies. The project can give more efficient and more reliable protection if it is implemented. Hope the research can provide reference points for the building of the defense-in-depth security system for campus network in future.