浅谈政府信息网络系统的内网安全防御手段

论文从政府信息网络系统的安全需求分析开始，针对内网安全防御设计了一个分层分级管理的内网安全管理系统。该系统包括了安全网络控制、基本网络资源管理、分布式管理和短信安全报警四大功能，并使用ARP方式实现了自动识别非法主机接入，利用ARP防御和交换机端口防御实现非法主机的自动隔离。

Discussion on Intranet Security Defence of Government Information Network System

This paper, beginning with the security demand analysis of government infotmation network system and in the light of intranet security de fence, describes a design of hierarchcial intranet security management system.The system involves four main functions, network security control, basic network resource management, distributed management and security alarm messaging. The automatic identification of illegal host access is realized with ARE And also the automatic isolation of illegal hosts is implemented by using ARP defense and switch port defense.