高校信息安全整体防护方案研究

随着“互联网+教育”的快速推进,各高校建成了包括学校门户网站、网上服务大厅、招生信息网站的Web应用中心。网站和业务系统数量增多,同时面临加剧的网络安全风险。高校信息安全建设需要从技术层面和管理层面两方面出发。采用先进的信息安全防护技术,有效抵御安全风险,从而为信息安全保驾护航。此外,制定相应的安全管理制度,对信息安全建设进行合理规划、统筹管理,保障和促进信息安全建设。结合高校的信息安全环境实际情况,探讨高校信息安全现状和防护措施,设计包括安全评估、纵深防御、访问控制、安全审计、应急响应与灾难恢复以及安全管理的高校信息安全整体防护方案。

Research on the Overall Protection Scheme of University Information Security

With the rapid development of"Internet+Education",universities have established Web application centers that consist of School Portals,Online Service Halls,and Admissions Information Websites.The increasement in quantity of websites and business systems brings higher security risk as well.The construction of information security in universities should start from two aspects of technology and management.To adopt advanced protection technology can resist security risks effectively.In addition,security management regulations can ensure and promote the construction of information security rationally and coordinately.This paper researches the overall protection scheme of information security that consists of Vulnerability Scanning、Defense-in-Depth、Access Control、Security Audit、Emergency Response、Disaster Recovery and Security Management regulations based on the reality situation in universities.