【正文】 內(nèi)網(wǎng)安全管理系統(tǒng)項目方案 科技有限公司 二〇〇八年 十一 月 目 錄 第一章 概述 ................................................................................................................................................ 4 建立內(nèi)網(wǎng)安全管理系統(tǒng)的必要性 .............................................................................................. 4 現(xiàn)狀分析 ........................................................................................................................................ 4 項目需求 ........................................................................................................................................ 4 第二章 系統(tǒng)建設(shè)目標(biāo)與原則 ................................................................................................................... 5 系統(tǒng)建設(shè)目標(biāo) ................................................................................................................................ 5 系統(tǒng)建設(shè)原則 ................................................................................................................................ 6 先進性原則 ........................................................................................................................... 6 易于管理、操作和維護原則 .............................................................................................. 6 充分利用現(xiàn)有資源原則 ...................................................................................................... 6 安全與性能負(fù)載均衡原則 .................................................................................................. 6 第三章 總體設(shè)計方案 ............................................................................................................................... 6 系統(tǒng)總體架構(gòu) ................................................................................................................................ 7 系統(tǒng)功能架構(gòu)設(shè)計 ....................................................................................................................... 8 基于進程的文檔加密驅(qū)動 .................................................................................................. 9 端口控制驅(qū)動 .....................................................................................................................10 移動存儲設(shè)備控制驅(qū)動 ....................................................................................................10 系統(tǒng)配置清單 .............................................................................................................................. 11 第四章 系統(tǒng)功能設(shè)計 ............................................................................................................................. 11 認(rèn)證授權(quán)系統(tǒng)設(shè)計 ..................................................................................................................... 11 客戶端動態(tài)注冊，浮動 License 管理 ............................................................................. 11 控制臺和客戶端的網(wǎng)絡(luò)身份認(rèn)證 ....................................................................................12 多種身份認(rèn)證相結(jié)合 ........................................................................................................12 策略集中分級管理 .............................................................................................................12 支持按分組和單個計算機靈活定制策略 .......................................................................13 限時有效策略 .....................................................................................................................13 數(shù)據(jù)安全保密系統(tǒng)設(shè)計 .............................................................................................................13 文件透明加解密 .................................................................................................................15 涉密文件安全防護 .............................................................................................................15 硬件安全防護系統(tǒng)設(shè)計 .............................................................................................................16 存儲設(shè)備控制 .....................................................................................................................16 通訊設(shè)備控制 .....................................................................................................................17 存儲設(shè)備準(zhǔn)入認(rèn)證 .............................................................................................................17 IT資產(chǎn)管理系統(tǒng)設(shè)計 ................................................................................................................17 資產(chǎn)的完備性 .....................................................................................................................17 資產(chǎn)變更的準(zhǔn)實時性 ........................................................................................................17 詳細(xì)的報告 .............................................................................................................