The Research And Design Of Security System Of Network Based On Military Information Network

Along with the abroad application of computer internet technology, the security of internet is more important. As opening system facing the people, the computer internet is facing with the threaten and attack from different areas. So, building up the security system is a very important problem. In recent years, the construction of information network is the trend of military modernization, so the security of information network is the chief task of constructing digital barback.Based on the need of security system of military information network, aimed at the need of information network construction for a given Air Force unit, this paper provided the solving method for military information network security, including virtual private network(VPN) technology to guarantee safe connection of different parts. Firewalls technology as the basic security system of the information network. Distributed multiagented intrusion detection system (IDS) as strong secure precautions of the information network. Installation of vulnerability scanning technology and netwrok antivirus software. Comparative standardization of network security management. Strengthening security backup and recovery of the data center to ensure defence of some important management systems of the information network.In the security design of the information network, we adopted the VPN technology based on IP Sec, implemented both authentication methods based on B/S mode and C/S mode. Time Machine Backup Exec Data Recovery system was used for data backup of some important management systems.The result of the actualization of this kind of system in the given Air Force unit indicates that firewalls could realize the security insulation between the information network and the superior’s, protect the inner essential information assets and internet groupware without affecting the system working efficiency. Most attacks are prevented outside by access control system of some network areas and special services.