Network security solution for IP network optimization project in Qinghai Province

The IP network system in Qinghai Province is a computer integrated information network based on data communication, which realizes information communication and resource sharing, and provides network service and information service for the society. However, with the development of E-commerce and personal network applications, as a public network platform, Qinghai IP network is confronted with a series of important and difficult problems, such as how to protect the secret of enterprises and users, and safeguard the legitimate rights and interests of enterprises and users. And some of the new situations that are emerging or coming up, and make this task appear more urgent and difficult, for example, in the current complex network application environment, the installation of a single anti-virus product is far from enough to protect the user network system, information resources security, enterprise, Unit network system security problems have not only come from the virus , hacker attacks, malicious intrusion and so on have become the main security threats, they can not only cause network congestion, transmission interruption, and even the consequences of system paralysis, more serious is that remote control, internal leaks and other acts can easily destroy key data, theft of confidential information, so that enterprises, units to bring immeasurable losses; For example, a sufficient solution for yesterday's Fast Ethernet connectivity performance has been inadequate for today's Gigabit Ethernet connection speed. For these special needs of Qinghai IP network, Golden Chen full use of its extensive industry experience and technical strength, provides a firewall, anti-virus, intrusion detection, host protection, VPN and other packages of products, the overall solution to achieve the active protection and passive monitoring, comprehensive protection and key protection of the perfect combination.

An analysis of the security problems of IP network system in Qinghai province

1, Qinghai IP network system security situation and demand analysis

In Qinghai IP Network Service system, most of them adopt TCP/IP as the main network communication protocol, the main server is UNIX operating system. As we all know, TCP/IP and UNIX are known for openness, the system is easy to interconnect and share information design ideas throughout the system, although the access control, user authentication authorization, real-time and ex post audit security content has been considered, but only to achieve the basic security control functions, There are a few such loopholes.

Although the existing IP network system in Qinghai has done some consideration to the security problem, designed the firewall system, but given the serious situation of the current IT system security, these considerations are relatively simple and preliminary, and have not formed a complete protective system; This is mainly because the firewall only protects the Qinghai IP network system's first line of defense, it mainly focuses on the communication source, the destination address and the port limits, in the actual application, this system business request many address all can access the key server application, so even if has the firewall, Hackers can also access critical servers from many places, and it is likely that the packet contains intrusion-attack code.

In addition, the hacker's intrusion process generally includes several steps, such as exploiting various resources, attacking the weakest system, attacking deeply, obtaining key resources and retreating. Therefore, for each hacker attack steps, we need to develop the corresponding preventive measures, and it has the technical part of the content, more important is the management, that is, security policy formulation and implementation.