CAJ | 학술논문

信息系统运行遵循“三分技术，七分管理”的原则，三分技术就是采取一定的防护控制策略来保证接入系统的计算机终端安全和防止外部的恶意攻击，确保证信息系统中敏感的、重要的数据不被泄露和篡改。终端安全策略的制定对于信息系统的安全具有十分重要的作用，现从VLAN划分，MAC地址绑定、访问控制列表(ACL)的应用这几个角度对安全防护策略进行分析、设置和仿真测试，其结果表明制定合理、有效的防护策略对信息系统的安全、稳定运行有效具有一定的作用。
신식계통운행준순“삼분기술，칠분관리”적원칙，삼분기술취시채취일정적방호공제책략래보증접입계통적계산궤종단안전화방지외부적악의공격，학보증신식계통중민감적、중요적수거불피설로화찬개。종단안전책략적제정대우신식계통적안전구유십분중요적작용，현종VLAN화분，MAC지지방정、방문공제렬표(ACL)적응용저궤개각도대안전방호책략진행분석、설치화방진측시，기결과표명제정합리、유효적방호책략대신식계통적안전、은정운행유효구유일정적작용。
Information system operation follows the principle of“three-point technology, seven-point management”, and three-point technology means to adopt certain security strategy, guarantee the computer safety of the access system and prevent external malicious attacks. Thus to protect the sensitive, important data in the information system from being leaked and tamped. So the formulation of terminal satety strategy for information system is of signficant improtance. This paper analyzes, from VLAN division, MAC address binding, and ACL (access control list) application, the security protection strategy. The simulation and test results indicate that the reasonable, effective protection strategy plays an important role in security and stable operation of the information system.