摘要
随着网络的飞速发展,内部网络安全问题日益突出。防火墙、IDS、IPS等网络安全产品重点放在了防范来自外部网络的威胁与攻击。该文设计并实现基于VLAN的内部网络安全实验平台。该平台包括准入控制、用户/终端健康检查、安全策略定制、网络状态监控等功能模块,对终端实施允许、阻断、隔离控制策略。实验结果表明,该平台能够有效安全的管理内部网络,可以作为信息安全专业本科生网络安全实验平台,也可作为小型企业内网安全管理工具。
With the rapid development of network, internal network security problem increasingly prominent. Network security products such as firewalls, IDS, IPS focus on preventing from external network threats and attacks. This thesis designs and implements internal network security experiment platform based on VLAN. The platform includes access control, user/terminal health inspection, security policy customization, network status monitoring, implements control strategy such as allow, block,isolate. The experimental results show that platform can manage internal network security effectively, can be used as an experiment platform for undergraduate of the information securityand can also be used as a small enterprise internal security management tool.
出处
《电脑知识与技术》
2015年第11X期41-45,共5页
Computer Knowledge and Technology
