数据城域网安全防护体系部署及解决方案研究

以中国移动数据城域网为例,分析了数据城域网的网络结构、承载业务及面临的主要安全威胁,构建了包含安全域划分及边界整合、设备安全配置、专业安全防护手段建设和信息安全管理平台建设4个层面内容的安全防护体系,并针对中国移动某省数据城域网的现状给出了多层次、阶梯式、分阶段的安全防护建设方案,解决了原有网络安全系统存在的各部分相对独立、关联性不强以及无相互补充、统一协调的防护体系问题。

Research on Security Protection System Deployment and Solution for Data MAN

Taken the data metropolitan area network （MAN） of China Mobile as an example, the network structure, bearing services and main security threat of data MAN are analyzed. Four security protection systems are constructed, including security domain division and border integration, device security configuration, professional security protection and information security management platform. According to the situation of a data MAN of China Mobile, the security protection construction solution is shown which is mullti-level, multi-step and phased. The solution can effectively solve the problems in original security systems, such as relative independence, weak correlation and incourdination of each part in protection system.