For the serious breakage behaviors, aiming at the education information-based application resulted from the network attacks which are becoming more and more complicated, the traditional static, unilateral and passive information security defense system has already not been satisfied with the security requirements under new-type application environment. To resolve these problems a three-dimensional hierarchy information security model is put forward including physical security, network security, data security and content security. It can safeguard the confidentiality, controllability of information security and so on. An active digital campus defense model APPDRRCC is put forward and security policies are designed in different stages to achieve the the active defense in the whole process from the early risk evaluation to the terminal trace. The experimental results in the campus show that the digital campus tridimensional security defense system can achieve tridimen-sional, dynamic and active defense. So the scheme is effective and feasible.%针对数字化校园中日益复杂多样化的网络攻击对教育信息化应用造成的严重破坏行为,传统的静态化、片面化的被动型信息安全防御体系已经无法满足新型应用环境下的安全需求.对此,从信息安全的4个层次——物理安全、网络安全、数据安全和内容安全出发,提出了数字化校园信息安全立体防御层次化安全模型,保障了信息安全的机密性、可控性等安全属性.在该模型中的网络安全层,提出了数字化校园网络安全全过程主动防护模型APPDRRCC,设计了各阶段的安全防护策略,实现了从前期的风险评估到后期的追踪反击全过程主动防御.该模型在校园网中的实际应用结果表明:数字化校园信息安全立体防御体系能够实现防御的立体化、动态化和主动性,该方案是有效、可行的.
展开▼
