基于安全局域网分级文件分发系统设计与实现

摘要

通过分析安全局域网系统文件动态分级管理技术机制以及系统基于动态监控交换机的终端行为监控结构,提出了一种基于安全局域网分级文件分发系统的设计与实现方案.该系统解决了原有安全局域网系统监控结构的网络化扩展问题,实现了网络文件的分级可控管理,除了能够防范来自系统外部的普通网络攻击行为外,确保了对系统合法用户操作行为的控制,有效阻止了内部人员信息泄露的基本途径,能够提高各类共享数据的安全性.%By analyzing the technological mechanism of file dynamic grading management in security LAN system and the terminal behavior monitoring structure based on dynamic monitoring switches in the system, this paper introduced a gradable file distribution system design and implementation plan based on security LAN. This system could solve the problem of network extension of monitoring structure in current security LAN system, and achieved gradable and controllable management of network files. The system could not only prevent common network attacks from external system, but also achieved control of users' legal operations in the system, which effectively cut off the fundamental ways of internal users' information divulgence, and significantly enhanced the security of different types of sharing data.