The Design And Engineering Implementation Of Campus Network Security Scheme

With the development of network techniques and application, computer network plays a more and more important role in people’s daily life, work and study. How to ensure network’s stability, reliability and security becomes the most concerning problem for network designers and managers. Campus network for colleges is one of the most lively networks. As the increasing scale and application of campus network, the security problem of it is increasingly salient. Campus network for colleges takes the tasks of scientific research and teaching. The security and stability of campus are of vital importance to the normalization of teaching and the confidentiality of achievements in scientific research. So it is necessary to establish a secure internet system.At present, many network security schemes usually simply use firewalls and antivirus software to achieve partial security. Security and protection are mainly focused on certain aspects. Network security deployment is not systematic. Often security incidents cannot be prevented. So, it is urgent to analyze the problem of campus network security extensively and intensively, apply advanced security techniques and products comprehensively and establish systematic and deep security precaution systems. This paper combines network security techniques and present network security products, and analyzes the needs of campus network security deeply from the basic needs of campus security, network log-in management and unified security management, then puts forward the design principles and ideas of campus network security system. This paper brings up the design principles of integration, entirety, balance, usability, step-by-step implementation, dynamic management. The design principles include systematization, generalization, equalization, reliability, expansion, advance, and practice. It sets forth the design ideas of campus network security from the aspects of hazardous area classification, campus internet behavior supervision and the unified security management. The paper puts forward the idea to change the design concept of campus network from centering on connectivity to centering on security. It researches and designs the security of campus network in the aspects of remote access security, perimeter security, intranet security, data center security, online behavior supervision and unity safety management. In the paper, author applies different network security technology and products such as firewall, IPS, behavior management devices synthetically and makes them link and cooperate on each layer so as to implement the holistic and systemic security of campus network. According to the design conception of campus network security, the paper in the end describes the campus network security of some college, including security implementation, device type and configuration of partial security devices.The paper is based on the profound analysis and synthetical application of network security technology combining with work practice and a great many surveys of establishing network security for college campus, which can be more referential and operable.