中小型网络安全规划与设计
摘要：中小企业在业务中对于信息技术和网络的依赖程度越来越高，必须引起对信息安全的重视。然而，由于企业将主要的精力集中在各种业务应用的开展上，再加之受限于资金、技术、人员以及安全意识等多方面因素，信息安全建设往往相对滞后。部分企业已经采用了“防火墙+防病毒”的基本安全措施，但很多中小企业什么安全保护措施都没有，不能不让人为此担忧。
随着网络技术的迅速发展，各种依托网络开展的攻击技术也得到了蔓延。黑客攻击手段越来越丰富，各类破坏力较大的攻击工具、文摘在网上唾手可得；中小企业的安全现状常常使得他们成了黑客攻击破坏的首选 “试验品”。另外病毒的发展已经远远超过人们预期的想象，破坏性越来越严重；加上企业内部信息安全管理制度的疏漏，为一些不法人员提供了大量的犯罪途径。中小企业迅速建立完善的信息安全体制已经势在必行。
关键字：中小型企业；网络；安全
发奋识遍天下字 ，立志读尽人间书。
Small and medium-sized network security planning and
design
Abstract: the small and medium-sized enterprise in the business for the information technology and network more and more rely on the information security, must cause the attention. However, because the enterprise will mainly focus on the various business applications development, coupled with the limited funds, technology, personnel and security awareness and other factors, the information security construction and often relatively lag. Some enterprises have adopted the\measures, but many small and medium-sized enterprise what safety protection measures are not, let a person worry about.With the rapid development of network technology, a variety of relying on network attack technology is also spread. Hackers means more and more abundant, all kinds of destructive force larger attack tools, abstracts online with extreme ease; small and medium-sized enterprise security status often makes them into a hacker attack preferred \expectations of imagination, damage is more and more serious; plus enterprise internal information security management system for omissions, some unscrupulous persons to provide a large number of pathways in crime. Small and medium-sized enterprises rapidly establish and improve the information security system has be imperative.
Key words: Small and medium-sized enterprises; network security
发奋识遍天下字 ，立志读尽人间书。
目 录
第1章 绪论 ................................................. 1 第2章 网络环境现状 .......................................... 3
2.1网络环境介绍 ...................................................... 3 2.2中小型网络情况分析 ................................................ 5
第3章 网络安全风险分析 ...................................... 7
3.1概要风险分析 ...................................................... 7 3.2 实际风险分析 ..................................................... 10 3.3 安全缺口 ......................................................... 11 3.4 网络安全评估 ..................................................... 11
第4章 中小型企业网络安全的实现措施 ......................... 12
4.1计算机安全 ....................................................... 12
4.1.1访问控制策略 ................................................. 12 4.1.2 确保网络安全的措施 ........................................... 16 4.1.3. 提高企业内部网安全性的几个步骤 .............................. 18 4.2 网络安全 ......................................................... 19 4.3 网络安全原则 ..................................................... 23
第5章 实现中小型企业网络安全的规划与设计 .................. 24
5.1 整体网络安全系统架构 ............................................. 24 5.2 整体安全防护体系 ................................................. 25 5.3 INTERNET和信息发布服务 .......................................... 26 5.4 INTERNET和内部网 ................................................ 27
结 论 ....................................................... 33 致 谢 ...................................................... 34 参考文献 .................................................... 35
发奋识遍天下字 ，立志读尽人间书。
精品word--中小型企业网络安全规划与设计
