导　　师： 苗放

学科专业： H1203

授予学位： 硕士

作　　者： ;

机构地区： 成都理工大学

摘　　要： 基于linux操作系统的网络服务器平台有很大的优越性，利用基于国产linux架构的低成本、安全的公共信息平台实现电子政务及其它应用，可以切实解决数字鸿沟问题。但是并非简单的系统集成和组合就能实现安全可靠的服务和应用平台，而是存在许多技术问题和安全问题需要加以解决。 本论文以国产linux的服务器应用为出发点，重点对linux服务器应用的安全性策略，配置管理、边界防护、病毒防范、安全管理以及各类型的网络攻击和对应的修正措施作了相关研究。 本文分为6个部分。第一部分论述了论文选题的意义、国内外现状和研究的主要内容。第二部分介绍了主要相关技术的基础知识。第三部分在对平台架构设计的基础进行简单描述后，就解决在应用中存在的一些安全问题，提出了实现安全的体系架构，并重点论述了整体安全性策略和一些攻防措施。第四部分论述了防火墙和snort入侵检测系统的具体应用技术，尝试提出在实际应用中的入侵检测技术的使用，以及与防火墙技术相结合，完善网络应用的安全性。第五部分描述了应用效果的评测，结合前人的经验和自己的心得，通过设计具体的测试方案，对系统安全性作了检测。第六部分是结论，总结了本论文的研究成果，并提出了自己的建议。 The network server platform which based on the Linux operating system has the very famous superiority, using the domestic Linux construct low cost, the safe public information platform realization electron government affairs and other applications may practically solve the digital gap problem. But by no means the simple system integration and the combination can realize the safe reliable service and apply the platform, it has many technical and security problem needs to be solved. The thesis take the domestic Linux server application as the starting point, has done the correlation research of the Linux server application secure strategy, it include the disposition management, the boundary protection, the viral guard, the safety control and various types network attack and the corresponding revision measure. This article divides into six parts. The first part discussed the thesis topic selected significance, the domestic and foreign present situations and the main content of research. The second part introduced elementary knowledge of the main correlation technology. The third part simple described the platform construction foundation, and then proposed the realization security system construction for solutions some security problems which exist in the application, and emphasis elaborated the overall secure strategy and some attack and defense measures. The fourth part discussed the concrete application technology of firewall and the Snort invasion Detect system, attempt proposed use snort in the practical application, as well as combine with the firewall technology, perfect network application security. The fifth part described the evaluation of application effect, unifies predecessor's experience and author's attainment, through the design concrete test plan, has made the examination to the system security .The sixth part is a conclusion, summarized the thesis research results of this thesis and put forward my own suggestions.

关 键 词： 操作系统 服务器 数据安全 入侵检测 网络服务器

分 类 号： [TP316 TP368.5 TP309.2]

领　　域： [自动化与计算机技术] [自动化与计算机技术] [自动化与计算机技术] [自动化与计算机技术] [自动化与计算机技术] [自动化与计算机技术]