Information Security And Its Supporting Technology, Research And Practice

Along with the development of network technology,network is applied more widely. At the same time,network informations's security becomes more important than before. Which can not be neglected is that the security hole of information systems threaten the network information's security.Security is a term that oppositely,there is no information systems that are absolutely safe. But,we can use information assurance to improve the network's security. Information assurance focus on the system's intrusion detection ability,event reaction ability and the quick restore ability when system has been intruded. Information assurance emphases on the defense and restore between the whole life-cycle of the system.This thesis researches two technology measures of appling information assurance,they are Defense-in-Depth and Security Health Care. Defense-in-Depth's base idea is to make usage of as many as possible defending measures to protect resource,apply assurance in multiple operation taches and support technologies that affect information security. Security Health Care means discovers system's vulnerability and hole by scan,monitor and control initiativly. Then takes response to achieve the goal of raising system's security. Basing on CORBA technology,the thesis puts forward a Security Health Care system's construct scheme. This scheme is made up of four subsystems,they are information collect subsystems,security information subsystems,attacking and defending subsystems and event manage subsystems.The task is to implement the security information subsystems of Security Health Care system. Besides,basing on "The implement of CORBA technology in Depth Network Security System",we partly implemented the function of attacking and defending subsystems.