The Research And Design Of Campus Network Security System

As the vital infrastructure, campus network plays an important part in teaching, scientific research, management and external communications. The of campus network security system should be design to control the education network bandwidth effectively, be satisfied with the multimedia and remote teaching, library access system and video conferencing. As in result, all the campuses are suffering from growing pains of campus network safety as the network scope becomes larger and larger.Firstly, the paper discusses the computer network security situation and the research background. And then form the network security policy and network security techniques, summarizes how to realize the network security and introduces the network security techniques include of firewall, IDS, encryption techniques, security scanning and so on. At the last, combines the practice of the campus network, the paper presents a new network security system combining IDS and firewall.According the P2DR model, an effective security system is composed of protection, detection and response, it can be considered as the minimum security system. The paper builds an effective security system, it uses the firewall as the protection, combines the IDS as the detection and response. Firewall can stop the prescient network attack, and the IDS can discern the ignorance attack and give the response quickly to cut the attack connection or tell firewall to revise the tactics. So, it can realize a whole network safety system by combining the firewall and IDS.In the environment of campus network, the campus network security system has been tested. The test results show that it has ideal function of intrusion detection and can greatly improve the capability of information security and network management.At last, the paper summarizes the system and gives the development direction in the future.