高校智慧图书馆信息安全体系构建

信息安全在高校智慧图书馆建设与服务中具有重要作用。文章以云南师范大学智慧图书馆信息化建设为例，从信息安全技术和信息安全管理体系建设2方面对高校智慧图书馆信息安全体系构建进行阐述，分别从4方面展开信息安全体系设计与建设:进行传统的信息安全防护，如出口防火墙、Web防火墙、上网行为审计、VPN技术、堡垒主机、漏洞扫描；构建基于安全大数据分析的态势感知体系，如终端安全检测响应平台、安全态势感知平台；实行实名认证、软件正版化、信息安全等级保护；搭建反向代理和站群管理系统等。该方法对全国同类高校智慧图书馆的信息安全体系构建具有参考借鉴意义。

Construction of Information Security System of Smart Library in Colleges and Universities

Information security plays an important role in the construction and service of smart library in colleges and universities.Taking the informatization construction of smart library of Yunnan Normal University as an example, this paper expounds the information security system construction of university smart library from two aspects: information security technology and information security management system construction.From traditional information security protection such as next-generation application firewalls, Web application firewalls, online behavior audit, VPN technology, bastion host, vulnerability scanning system, situation awareness system based on security big data analysis such as endpoint detection and response platform, security situation awareness platform, and in accordance with the relevant laws and regulations of national information security, real-name authentication, software legalization and information security level protection are constructed, reverse proxy and Website group management system which can effectively enhance security, design and construction of information security system from above aspects. It has important practical significance and reference significance for the information security system construction of the similar smart libraries of colleges and universities in China.