络安全防御系统的设计与实现.docVIP

毕业论文 网络安全防御系统的设计与实现 摘要 随着Internet的日益普及，网络安全问题也日益突出，如何在开放网络环境中保证数据和系统的安全性已经成为众多业内人士关心的问题，并越来越迫切和重要。虽然目前对安全技术的研究也越来越深入，但目前的技术研究重点都放在了某一个单独的安全技术上，却很少考虑如何对各种安全技术加以整合，构建一个完整的网络安全防御系统。 本论文以作者的实际工作为基础，重点论述了构建一个网络安全防御系统的方案设计和实现过程。在方案设计部分，本文重点论述了设计过程中的两个关键阶段，即安全策略与风险分析，在安全策略部分中详细描述了作者在设计一个完整的网络防御系统中所考虑的方方面面，而风险分析部分则以生动的实例说明了如何分析一个系统所面临的风险并将其量化的过程和算法。在实现部分，本文重点论述了作者所设计的网络安全防御系统采用的网络拓扑结构及其中采用的各种安全技术和安全产品的具体细节。最后则详细描述了该网络安全防御系统中的一个重要组件一网络安全监测仪的功能及技术细节，以及为其可用性而开发的远程控制台，并在此基础上提出了安全监控中心的概念及实现计划。 关键字:网络安全/安全策略/风险分析/入侵检测/日志审计/漏洞/规 则/认证/加密/CGI  Abstract With the development of network society and the extension ofInternet and intranet,the problem of network security becomes more andmore acute,and how to protect the data and system in the open networkenvironment has became a more and more important and imminentquestion.Although the research about the security technology has alsogained some achievement,but most of them put their emphasis on onekind of security technology,few consider how to integrate all kind ofsecurity technology into one perfect network security defense system. This thesis discusses the design and implement process of a networksecurity defense system on the basis of the work of author own, In the part of design ,this thesis put the emphasis on the critical phasisof design process,they are security diplomatic and risk analysis.The partof security diplomatic discuss every aspect need to consider when designa network security defense system.and the part of risk analysis discusshow to analysis the risk of a network system and how to quantify it. In the part of implement ,this thesis put the emphasis on the securitytopology of network and all kinds of security technology adopt in thissecurity network envirionment.then this thesis discuss the importantcomponent of this network security defense system-network securitymonitor,include its function and detail of its technology,at last, this thesisdiscuss the remote control panel of the n