Research On Security System Of Campus Network For Baoji University Of Arts And Sciences

In recent years,as the forward position of information technology applications,computer networks have deepen into campus,and gradually formed a network with characteristics,becoming an important part of the Internet.Network construction has become the basic project of university hardware construction,and an important sign to measure informatization and modernization level in school.The popularity of the campus network plays an invaluable role in rationally allocating educational resources,speeding up information processing,achieving resource sharing and improving work efficiency.At the same time,it is an important means to improve teaching,research,and management level of colleges and universities.It is safe to say that colleges and universities can't live without the Internet.In recent years,hardware and software technical conditions of the campus network are getting better and better,larger and larger as well as more and more widely applied.However,with the continuous expansion of the scale of the campus network and the diversified development of users' Internet access and equipment,a series of network security issues closely related to it become increasingly prominent.The campus network faces not only the security threats from the Internet but also the unintentional and intentional threat from a variety of users in campus.It has become the primary security technology problems faced by all colleges and universities how to ensure that the campus network retains in stable,efficient and safe operation.Taking the campus network of Baoji University of Arts and Sciences as research object,and in face of the complicated campus network security realities,this paper analyzes the security problems of campus network,and makes an in-depth research on network security technology and measures,aiming to theoretically build up and improve the network security system,and guide the construction practice of local university campus network.Firstly,this paper studies the causes of network security in campus network.On this basis,demonstration on research status of network security research is conducted.The paper mostly analyzes the network security model,including classic models like PDR,PPDR and others,which will lay the foundation for the future study.The construction of the securitysystem is actually organism combination and mutual studying among a variety of network security technologies.So the paper then studied the commonly used network security technologies,including access authentication technology,firewall technology,intrusion detection,VPN and so on.Then,according to the network security status of Baoji College of Arts and Sciences,a detailed analysis of the needs is made.The basic situation of the network,the security threats faced by the Baoji University of Arts and Sciences and the goal of network security construction are studied in detail.Besides,it puts forward more specific and targeted requirements on campus network security system.On the basis of the above research,the paper puts forward the overall solution,also the network security system construction plan,of Baoji University of Arts and Sciences,which is also the core of this paper.This paper makes designs from the aspects of management measures and technical measures to solve the campus network safety management problem.Under the framework of safety management,we take security strategy as the core and technical measures to support and protect the security of the whole network.In the design of campus network security management program,this paper makes designs mainly on a unified identity,"access and quit",network security defense,export flow management optimization and other aspects,especially detailed designs on network access as the first safety management technology barrier.Network security defense design is mainly based on IDS,vulnerability detection combined with network management system,comprehensive deployment of active,passive means of defense,protecting campus network security.Besides,program design adopting active detection and authentication system and gateway system linkage defense ARP spoofing is separately introduced.In addition,the export flow management optimization design is the scheme to deal with the campus users' high demand on the export bandwidth.Detailed flow detection program is introduced.At the same time,optimization management for different types of flow is carried out to satisfy the needs of users.Finally,after testing,it shows that the research proposal introduced in this paper can satisfy the security requirements of the school network,and can further improve the security protection and network management level of the campus network,which will guide the campus network security construction of Baoji University of Arts and Sciences.