Local area network system and method for maintaining safety thereof

Abstract

The invention discloses a local network system and a method for maintaining the safety thereof and belongs to the field of network safety. The system comprises network monitoring equipment, a safety terminal, a main control server, public / private secret-associated source servers and a protective server, wherein the safety terminal, the main control server, the public / private secret-associated source servers and the protective server are connected with the network monitoring equipment; the network monitoring equipment monitors data switching and forwarding; the safety terminal performs local monitoring; the main control server verifies identity and maintains safety policies; the public secret-associated source server monitors accesses to the public secret-associated sources; the private secret-associated source server monitors the accesses to private secret-associated sources; and the protective server provides data reduction protection. The method comprises the following steps that: the safety terminal inputs authentication data and input modes; and the main control server verifies the identity of a user; and if the user passes through the verification, the main control server, the network monitoring equipment, the public secret-associated source server, the private secret-associated source server, the protective server and the safety terminal jointly maintain the safety of the network. The system and the method improve network access safety.

Description

technical field [0001] The invention relates to the field of network security, in particular to a local area network system and a method for maintaining information security of the local area network. Background technique [0002] Information security issues in a network environment are much more complicated than those in a stand-alone environment. Most of the current network security problems do not come from outside the network, but are caused by malicious or illegal operators inside the LAN. The security and trustworthiness of the LAN has become the prerequisite and necessary condition for the security of the WAN. Only by solving the security problem of the LAN first, can the security problem of a larger-scale network be solved. [0003] Among many LAN security issues, the leakage of confidential information is extremely harmful. According to data records, more than 70% of most confidential and sensitive data are leaked by internal employees from the desktop terminal co...

AI Technical Summary

Problems solved by technology

[0004] After analyzing the existing technologies, the inventors found that the characteristics of various existing solutions are that, firstly, autonomous access control strategies are usually adopted, which can prevent illegal users from accessing data, but often cannot prevent legal users from intentionally or Unintentional data leakage; second, most of them rely on cryptography technology, and the encryption protection of data information prevents information leakage to a certain extent, but it is difficult to obtain security protection for the plaintext held by legitimate users; third, the technology used is relatively single, For example, it is only for the prevention and control of internal information exchange in the LAN, or to prevent information leakage caused by mobile storage devices, and there are few considerations for the architecture of the LAN.

[0005] In addition, although the existing comprehensive solutions in the industry have been applied in practice, they have not formed a complete theoretical system and perfect solutions to guide the construction of LAN security systems

Different intranet security systems often adopt different architectures. On the one hand, they adapt to certain specific needs. On the other hand, it also makes the assessment of the security of these systems more complicated, and it is difficult to verify their security and credibility theoretically.

Images