安全域划分关键理论与应用实现

随着经济的快速发展，业务需求成倍增加，计算机系统的功能在不断增强，其网络复杂程度也在不断提高。目前网络主要存在如下问题：网络边界不够清晰，对网络内各部分的安全需求缺乏统一规划，没有对核心业务系统的访问进行很好的控制；各接入系统之间没有进行明确的访问控制。网络之间彼此可以互相访问，系统局部的安全问题极易扩散到整个系统。提出动态安全域划分的方案，实现一个系统的动态安全域划分。从纵深的角度，全盘考虑安全的部署和应用，提高了网络安全性。

On Theory of Partition of Secure Area and Its Application

With the rapid development of economy and the multiplied increase of business requirement, the function of computer system gets more improvements and the network becomes more complex. At present, problems of network are in such aspects as the network border is not clear, the security requirement of network lacks integrated, plan, and user access information of the core operation system is not well Meanwhile, as there is no clear control of access information between one access system and the network can visit another, leading to the diffusion of a partial bug to the whole network. A plan managed other, one of dynamic secure area partition is put forward and realized in a system. The plan, considering comprehensively a safe arrangement and application from the perspective of depth, greatly increases the security of network.