IATF思想下的网络安全系统设计及应用

摘要

为了减少网络异常事件发生,需要将网络管理、通信控制等方面联系起来共同进行网络防御.因此,设计信息保障技术框架(IATF)思想下的网络安全系统.设计的系统由内网、访问控制模块、外网与业务网组成,其三层网络框架使网络设施部署与信息隔离变得更加容易.访问控制模块利用IATF思想在信息传输装置上建立多层强力安全防御机制,设计网络安全防御体系与IATF信息安全防御模型,实现IATF认证与授权机制.实验结果表明,该系统的整体运行效果佳,防御性良好.%In order to reduce the occurrence of network abnormal events,it is necessary to combine the network manage-ment,communication control and other aspects for network defense. Therefore,a network security system based on information assurance technology framework(IATF)was designed. The system is composed of internal network,access control module, external network and business network.And its three-layer network framework makes the network facilities deployment and informa-tion isolation easier. The IATF thought is used to establish the multi-layer powerful security defense mechanism in the informa-tion transmission device. The network security defense system and IATF information security defense model were designed to realize the IATF authentication and authorization mechanism. The experimental results show that the system has perfect overall running performance and high defensive performance.