基于Web的实验室管理系统安全策略研究

近年来,越来越多的高校开始采用智能化管理系统对实验室进行日常管理,但系统被恶意入侵、用户账号被盗取、用户权限遭篡改等事件不断出现,为实验室管理系统的信息安全敲响了警钟。为完善信息安全防御体系,针对目前各类常见的安全隐患,提出一套基于Web的实验室管理系统的信息安全策略：应用三层C/S和三层B/S混合结构模式构建系统、使用隧道技术和虚拟网卡建立安全的VPN通道、采用网络型入侵检测系统实时监控网络、严格划分用户权限,通过这些技术来保障系统和数据信息的安全。

Research on security strategy of laboratory management system based on Web

In recent years, more and more colleges and universities have begun to use the intelligent management system for the daily management of laboratory, but the incidents such as malicious intrusion, stealing account and tampering permission continue to occur, which have been ringing alarm for information safety. In order to improve the information security defense system, the paper proposes a set of information safety strategy with the consideration of common hidden dangers for laboratory management system based on web： hybrid structure based on the of three-layer C/S and three-layer B/S modes is used to build the system, tunnel technology and virtual network interface are used to build a safe VPN gateway, network intrusion detection system is to create a real-time monitoring of network alarm mechanism, and user privilege division is adopted to guarantee the security of the system and the information.