摘要
作者在深入研究国际、国内信息安全技术及理论的基础上 ,根据客票系统的实际需求和在该系统安全方面的应用实践 ,提出了适合本应用系统的安全理念 ,详细论述了客票系统安全体系的构建 ,研究探讨了最新网络安全技术在客票系统中的应用与发展。针对客票系统的网络结构及对信息安全原理的理解 ,提出一套以应用系统为核心的安全防护体系。我们在网络系统、操作系统、数据库系统、应用系统 4个层面上采取了相应的措施 ,运用新的网络安全技术建立多层次的防御体系 ,各层有机地结合 ,辅以动态的检测和实时监控 ,构成一个较完整的网络安全体系。安全体系的实现是以整体安全策略为核心 ,在安全策略的控制和指导下综合运用各个层次的防护手段 ,在实际应用中不断总结调整安全策略 ,采用适合的新技术 ,结合严格安全管理制度 。
Based on the study fruits of information safety technique and theory at home and abroad, as per actual requirements of ticketing system and the practical application in the safety aspect of the system on China′s railway, this paper puts forward a new safety concept applicable to the ticketing system .The paper introduces the formation of safety system and of the ticketing system in detail and points out that the development trends to the latest network safety technique in the ticketing system. According to the network configuration of the ticketing system and the understanding of the information safety principle, the paper puts forward a set of safety protection system with the application system as the center. The new network security techniques and methods are adopted to build a protection system on four layers including network system, operating system, database system and application system. With dynamic detection and real time monitor, the four layers are combined organically to constitute a relatively integrated network security system. The whole security stratagem is the core of security system. Under the control of this whole security stratagem, different protection methods are used synthetically. In actual application of the system, in combination with strict security management system, the security stratagem is summarized and adjusted constantly and new techniques adopted to ensure the safe operation of the system.
出处
《中国铁道科学》
EI
CAS
CSCD
北大核心
2001年第6期63-66,79,共5页
China Railway Science
