校园网络安全分析与安全体系方案设计

摘要

分析了校园网络面临的安全风险,针对校园网络面临的安全风险,提出了基于防火墙网络访问控制、入侵检测技术、虚拟专用网技术、内部虚拟局域网(VLAN)划分、终端安全管理的安全体系解决方案,并对ICMP攻击、TCP SYN FLOOD攻击和Smurf攻击进行了安全测试.测试表明:该方案能有效防御攻击,具备静态的被动的防御和主动防御功能,能够给予校园网络较大的安全防护.%The security risks of the campus network were analyzed. According to these security risks, a security system was proposed based on firewall access control,internal Virtual Local Area Network (VLAN) division, intrusion detection system, Virtual Professional Network (VPN), and terminals security management. Then, security tests against ICMP attack, TCP SYN FLOOD attack and Smurf attack were carried out. The test results show that: this security system with static passive defense and active defense capabilities can effectively defense attacks, providing greater security to campus networks.