Design And Implementation Of Network Information Security Plan In A Private University

"Without the network security, there is no national security; no information, there will not be modernization." This shows that the information security has become one of national strategies. The university has been paid a great attention to the construction of the network environment since its establishment. In the early stage, however, campus network construction lacks of funds and equipment, and because of high prices of software and hardware equipment, the security weakness of low hardware configuration has always been. Therefore, the virus and hacker invasion has become an immense threat to network security. According to the requirement of each layer will implement the "built-in safety" combination of the overall safety planning thought, the design of campus network information security consists of six layers: the physical layer, network layer and host layer, application layer, data layer as well as management layer, adapting to the actual deployment of constructing a campus-network information security platform.According with the national strategies for network information security and campus-side itself network environment as well as letting more security and stability of the campusnetwork, the paper, based on the proposed technical requirements of the physical layer, network layer, application layer, data layer and the management and host layer, starting from the overview with the standard of network information security rank and protection requirements, suggests to consummate the system of campus network information security, and provides a firewall, IDP(Intrusion Detection and Prevention), virtual local area network(VLAN) and virtual private network(VPN), virus prevention and disaster cloud security, system security and data backup as well as a series of security defense system for the campus-network. At the same time, we have made a detailed information security management system and safety incident emergency response project. Implementation of the programs is a very complicated engineering, therefore, we have employed a varieties of advanced technology and equipment, such as the key technologies of firewall, an intrusion test and defense of IDP, virtual private network(VPN), virus prevention and control, system security reinforcement, vulnerability scanning and data disaster tolerance. Again, we have re-selected and constructed the IDC room and revised campus-network design and implementation of information security. In the process of IDC room construction we have integrated the safety and more stability ideas through reinforcement of the system,vulnerability scanning, data backup and restore, as well as the firewall and test of the second generation implementation of information security technologies, finally we have got a complete set of experiments, testing data and the effect of the visual interface.The paper, committed to the design and implementation of university campus-side information security project, we now have successfully selected and constructed the coreroom of campus-side IDP. Also, through the analysis of the information security requirements of various levels and the construction of the experimental environment, we have successfully completed a series of experiments and tests, combining the current network status with the core applications around. We have constructed and deployed a set of defense system for campus-network information security, realized the dynamic monitoring and emergency response, reduced occurrences of the security incidents, improved the response speed, source tracking and dynamic adjustment. We have formed a campus-network information security project in accordance with the relevant national requirements: the secondary protecting standards of campus-network information security. Network information security technology will constantly updated. In the future, our university will strive to study cloud computing, emerging technologies such as high-speed wireless networks and the IPv6, and all these will bring to us more unknown security problems.