网络安全系统设计的研究

网络的应用范围越广，来自内部和外部组织的对网络脆弱性的袭击就越大。对一个组织、一个企业来说，构建一个适合自身的网络安全系统是非常必要的。文中在所提出的一种网络安全系统设计的框架的基础上，对其中的网络安全设计进行了详细的分析，给出了体系结构模型和策略管理执行模型，把安全体系结构、安全策略管理的实现和网络安全的实现机制有机地结合在一起，确保高级需求分析到低级系统的实现机制之间的平滑过渡。

Research for Network Security System Design

The greater the availability of the network, the greater its vulnerability to threats from within and outside the organization. To an organization, an enterprise, constructing an appropriate network security system is very necessary. Based on a framework for network security system design put forwarded in, detailed analysis of the phase of network security design is made in this paper, and architecture model and policy management implemented model are given, which hangs security architecture, security policy implement and the enforced mechanism of network security together, and insures the transition between high-level security requirement analysis and the low-level system implementation smoothly.