【正文】 入 ............................................................................................................................ 15 網(wǎng)絡(luò)結(jié)構(gòu)的安全風(fēng)險(xiǎn)分析 ................................................................................... 16 來(lái)自與公網(wǎng)互聯(lián)的安全威脅 .......................................................................................................... 16 內(nèi)部網(wǎng)絡(luò)與系統(tǒng)外部網(wǎng)互聯(lián)安全威脅 ........................................................................................ 17 內(nèi)部局域網(wǎng)的安全威脅 ................................................................................................................... 17 系統(tǒng)的安全風(fēng)險(xiǎn)分析 ........................................................................................... 17 應(yīng)用的安全風(fēng)險(xiǎn)分析 ........................................................................................... 18 資源共享 ............................................................................................................................................. 18 電子郵件系統(tǒng) ..................................................................................................................................... 18 病毒侵害 ............................................................................................................................................. 18 數(shù)據(jù)信息 ............................................................................................................................................. 19 管理的安全風(fēng)險(xiǎn)分析 ........................................................................................... 19 第 3 章 . 網(wǎng)絡(luò)安全需求及目標(biāo) .................................................................................. 20 安全需求 ............................................................................................................. 20 物理上安全需求 ................................................................................................................................ 20 訪問(wèn)控制 需求 ..................................................................................................................................... 20 防范非法用戶非法訪問(wèn) ........................................................................................................... 20 防范合法用戶非授權(quán)訪問(wèn) ...................................................................................................... 21 防范假冒合 法用戶非法訪問(wèn) .................................................................................................. 21 加密技術(shù)需求 ..................................................................................................................................... 21 入侵檢測(cè)系統(tǒng)需求 ............................................................................................................................ 21 安全風(fēng)險(xiǎn)評(píng)估系統(tǒng)需求 ................................................................................................................... 22 防病毒系統(tǒng)需求 ................................................................................................................................ 22 安全管理體制 ..................................................................................................................................... 22 4 構(gòu)建 CA 系統(tǒng) ..................................................................................................................................... 22 安全目標(biāo) ............................................................................................................. 22 第 4 章 . 網(wǎng)絡(luò)方案設(shè)計(jì)原則 ...................................................................................... 24 、設(shè)計(jì)目標(biāo) ........................................................................................................... 24 、設(shè)計(jì)原則 ........................................................................................................... 24 、網(wǎng)絡(luò)安全系統(tǒng)需求描述 ..................................................................................... 25 、網(wǎng)絡(luò)安全系統(tǒng)配置需求 ..................................................................................... 28 、網(wǎng)絡(luò)安全管理設(shè)計(jì) ............................................................................................ 28 網(wǎng)絡(luò)信息系統(tǒng)的安全管理原則 ..................................................................................................... 28 多人負(fù)責(zé)原則 ............................................................................................................................. 28 任期有限原則 ............................................................................................................................. 29 職責(zé)分離原則 ............................................................................................................................. 29 第 5 章 . 網(wǎng)絡(luò)安全解決方案 ...................................................................................... 30 、防火墻 系統(tǒng)設(shè)計(jì)方案 ......................................................................................... 30 防火墻系統(tǒng) ......................................................................................................................................... 30 防火墻的 VPN 功能 ......................................................................................................................... 30 防火墻對(duì)服務(wù)器的保護(hù) ................................................................................................................... 31 防火墻對(duì)內(nèi)網(wǎng)的保護(hù) ....................................................................................................................... 32 、 IDS 詳述 ........................................................................................................... 33 IDS 系統(tǒng) ............................................................................................................................................... 33 IDS 監(jiān)控 ............................................................................................................................................... 34 、電子政務(wù)整體網(wǎng)絡(luò)安全解決方案 ...................................................................... 34 第 6 章 . 網(wǎng)絡(luò)安全產(chǎn)品選型 ........................................