广西气象部门信息网络系统安全防护策略探析

总结广西各级气象部门信息网络面临的安全威胁来源,主要有：病毒入侵和黑客攻击;基于操作系统和应用软件安全漏洞的攻击;网络用户密码盗用与权限滥用;非授权用户对关键部门信息系统的非法访问等。指出针对目前存在的网络安全威胁,关键是要提高各级领导及用户的安全防范意识,增加信息网络系统安全设备的部署。对于病毒入侵和黑客攻击的防御,可采取在网络中部署网络版杀毒软件、硬件防火墙、入侵检测系统IDS等来应对;对于基于操作系统和应用软件安全漏洞的攻击,可通过安装操作系统、应用软件的升级补丁进行完善;网络用户密码盗用与权限滥用的威胁,可通过合理设置用户权限,设置复杂的用户密码等安全手段加强防护;狙击非授权用户对关键部门信息系统的非法访问,可以通过划分子网、设置虚拟局域网（VLAN）以及防火墙黑白名单等多种方法保护关键部门信息系统不被非法访问。

Analysis on Security Protection Strategies of Information Network System in Guangxi Meteorological Departments

Sources of information network security threats for Guangxi meteorological departments are summarized,including virus and hacker attacks;based on the operating system and application software security vulnerability attacks;network user password theft and abuse of authority;how to snipe unauthorized users to key sectors of information system of illegal access.It points out that in view of the existing network security threats,the key is to improve the leadership at all levels and user security awareness,increase the information network system of the deployment of the safety device.The virus and the hacker attack defense,can be taken in the network deployment network version of antivirus software,firewall,intrusion detection system based on IDS to deal with;for operating system and application software security vulnerability attacks,through the installation of the operating system,application software upgrade patch is perfected;network user password theft and abuse of authority threat,the reasonable setting user privileges,setting up a complex user password security measures such as strengthening protection;sniping illegal access of unauthorized users to key sectors of information system,through dividing subnetwork,setting virtual local area network(VLAN) and firewall blacklist methods to protect critical information systems are not illegal access.