(The main content of this article is divided into five parts. The first part is an introduction, which introduces the factors and meanings of network transformation; the second part is an overview of information system security, which introduces the basic concepts and security system framework of information system security; the third part introduces ICBC network system security analysis and security design criteria , which specifically introduces ICBC's system structure, security risk analysis, security demand analysis, and security design criteria, and focuses on the selected network technologies, especially firewall technology, intrusion/intrusion detection technology and antivirus system; the fourth part introduces ICBC Intranet security control and ACL strategy, the security level of the intranet, the division of security domains, the security design criteria of the intranet and the division of VLANs are introduced in detail; the fifth part specifically introduces the status of the extranet and the implementation scheme of network construction. . . . . . . .
ICBC branch network security system design scheme.pdf)