Ony-way Network Isolation System’s Design And Realize

The wide application of electronic information technology and computer networktechnology is a revolution in today’s society, it reduce production costs, improveefficiency, rich life content and making modern society to move forward at a faster rate.The level of China’s electronic information increase very fast since the1990s,theenterprises, banks, schools, government, army and other departments have establishedtheir own information system or computer network, the information exchange betweenthe various information systems demand become more and more strongly.But in recent years, computer viruses, hackers and malicious attacks have becomeincreasingly rampant, and posed a grave threat to the security of the electronicinformation system. Currently, in order to prevent information leakage,the exchange ofinformation between networks of different security classification are mostly usedphysical isolation and offline copy mode, this method matgreatly reducing theefficiency.In this thesis, through research of network isolation and information exchangetechnology, and realize the mechanism analysis of existing mainstream networkisolation and information exchange products, summed up the products of networkisolation a double system architecture to meet internal and external separation, to ensurenetwork between isolated exchange application data, five design points. Finally,security access control, virus protection, network isolation, one-way transmission oftechnical means, integrated use of key technologies to solve the triple one-waytransmission control technology, one-way security isolation ferry technology to achievea set of network unidirectional isolation control system, with network isolation andunidirectional transmission, security checks and filter control, operation monitoring andsecurity auditing, attack protection and their own security and other functions, can bethe different between the dense network security isolation at the same time to achievehigh-speed, real-time, security, reliable unidirectional import.