摘要
Recentlythetroublesrelatedtothenetworksecurityhaveoftenoccurredattacks.Itconsistsoftwofundamentalthinge;themonitoringandtheaccesscontrol.Tomonitorthenetwork,wehaveinstalledtheintrusiondetectioinsystemandhavemanageditsince1998,Forthesecondthing,wearrangedthreecategoriestoclassifyallhosts(about5000hosts)atKEKaccordingtotheirsecuritylevel.Torealizethesethreecategories,wefiltertheincomingpacketfromoutsideKEKwhetherithasaSYNflagornot.Thenetworkmonitoringandtheaccesscontrolproducedgoodeffectsinkeepingoursecuritylevelhigh.Since2000wehavestartedthetransitonofLANfromshared-medianetworktoswitchednetwork.NowalmostpartofLANwasre-configuredandinthisnewLAN10Mbps/100Mbps/1GbpsEthernetaresupported.Currentlyweareplanningfurtherspeedup(10Gbps)andredundancyofnetwork.NotonlyLANbutalsoWAN,networkspeedwillbeupgradedto10GbpsthankstothestrongpromotionofITbyJapanesegovernment,Inthisveryhighspeednetwork,ourcurrentstrategywillbeaffectedandagainthenetworksecuritybecomesabigissue,Thispaperdescribesourexperiencesinpracticeofthecurrentstrategyandmanagementknow-howtogetherwiththediscussiononthenewstrategy.
出版日期
2001年01月11日（中国期刊网平台首次上网日期，不代表论文的发表时间）
