基于虚拟化的多网安全办公系统研究与设计

信息化程度的不断提高,使得各部门在完成正常办公业务时通常都需要访问多个不同安全域网络,如内部办公网、外部办公网、互联网等。针对用户多网办公存在的安全问题,提出基于虚拟化的多网安全办公技术研究。通过引入受控策略、安全策略、可信策略等关键策略,实现信息单向导入、外设管控、虚拟机间信息受控拷贝、可信启动、透明存储加密等功能。最后给出安全办公原型系统,结果表明该系统在保证系统正常运行效率的同时能有效满足用户多网办公的安全需求。

DESIGN AND RESEARCH OF MULTIPLE NETWORK SECURITY OFFICE SYSTEM BASED ON VIRTUALIZATION

With the constant improvement of the degree of informatization, departments usually need to access different network to complete normal office business, such as the internal office network, external office network and Internet. In order to solve the security problem of multiple network office, the multiple network office terminal based on virtualization technology was proposed. By introducing key strategies, such as control strategy, security policy and credible strategy, we can realize the function of information one-way import, peripheral control, information controlled copies between virtual machine, trusted startup and transparent storage encryption.