【摘要】：基于GIS的礦山信息管理系統(tǒng)應(yīng)用日益廣泛,由于網(wǎng)絡(luò)的開放性、用戶成分的復(fù)雜性、數(shù)據(jù)的敏感性、空間數(shù)據(jù)與屬性數(shù)據(jù)的關(guān)聯(lián)性等諸多因素,系統(tǒng)及數(shù)據(jù)的安全性面臨嚴(yán)峻挑戰(zhàn)。 本文在礦山信息系統(tǒng)的基礎(chǔ)上,論述影響系統(tǒng)及數(shù)據(jù)安全的主要因素,從內(nèi)部威脅和外部威脅兩個(gè)方面分析了具體的安全威脅類型。提出了系統(tǒng)與數(shù)據(jù)的安全目標(biāo),分析了系統(tǒng)及數(shù)據(jù)的安全需求,設(shè)計(jì)了系統(tǒng)安全策略,主要包括管理體系、物理安全、應(yīng)用系統(tǒng)安全、數(shù)據(jù)庫(kù)安全四方面。在管理體系方面設(shè)計(jì)了遵循多人負(fù)責(zé)原則、任期有限原則、職責(zé)分離的原則,在安全技術(shù)方面采用注冊(cè)碼軟件保護(hù)技術(shù)、身份認(rèn)證和訪問控制技術(shù)、數(shù)據(jù)加密、數(shù)據(jù)一致性控制、安全審計(jì)與日志追蹤、數(shù)據(jù)庫(kù)備份與還原技術(shù),其中訪問控制技術(shù)采用了較為靈活的基于角色訪問控制模型,保證數(shù)據(jù)一致性采用了版本控制、輸入檢查機(jī)制、關(guān)聯(lián)表同步修改等多種方法,安全審計(jì)與日志追蹤結(jié)合文檔和數(shù)據(jù)庫(kù)對(duì)日志文件進(jìn)行存儲(chǔ),保證日志信息的完整準(zhǔn)確。最后,基于本文設(shè)計(jì)的安全策略,以支家地礦山管理信息系統(tǒng)為應(yīng)用實(shí)例,進(jìn)行了相應(yīng)策略的實(shí)現(xiàn)。圖25幅,表19個(gè),參考文獻(xiàn)64篇。
[Abstract]:The mine information management system based on GIS is widely used. Because of the openness of network, the complexity of user composition, the sensitivity of data, the correlation between spatial data and attribute data, etc. The security of system and data faces severe challenge. Based on the mine information system, this paper discusses the main factors that affect the security of the system and data, and analyzes the specific types of security threats from two aspects: internal threat and external threat. The security target of system and data is put forward, the security requirement of system and data is analyzed, and the system security strategy is designed, which includes four aspects: management system, physical security, application system security and database security. In the aspect of management system, we have designed to follow the principle of multi-person responsibility, the principle of limited tenure, the principle of separation of duties, the adoption of registration code software protection technology, identity authentication and access control technology, data encryption in the aspect of security technology. Data consistency control, security audit and log tracking, database backup and restore technology, access control technology adopted a more flexible role-based access control model, to ensure data consistency using version control, In order to ensure the integrity and accuracy of log information, many methods such as input checking mechanism, synchronous modification of associated tables, and so on, are used to store log files by combining security audit and log tracking with documents and databases to ensure the integrity and accuracy of log information. Finally, based on the security strategy designed in this paper, taking the management information system of Jijia mine as an application example, the corresponding strategy is implemented. There are 25 pictures, 19 tables and 64 references.
【學(xué)位授予單位】：中南大學(xué)
【學(xué)位級(jí)別】：碩士
【學(xué)位授予年份】：2013
【分類號(hào)】：TD67;P208

【參考文獻(xiàn)】

相關(guān)期刊論文 前10條

1 汪劍;郭朗;;分布式遠(yuǎn)程教育數(shù)據(jù)庫(kù)系統(tǒng)的設(shè)計(jì)與實(shí)現(xiàn)[J];成都大學(xué)學(xué)報(bào)(自然科學(xué)版);2009年04期

2 胡祺;王芙蓉;郭丙軒;柯俊;王鐵程;;地理空間數(shù)據(jù)安全技術(shù)研究與實(shí)現(xiàn)[J];測(cè)繪信息與工程;2011年04期

3 趙潔;基于組件的Web管理信息系統(tǒng)數(shù)據(jù)安全性策略[J];電腦知識(shí)與技術(shù);2005年29期

4 陳珉,喻丹丹,涂國(guó)慶;分布式數(shù)據(jù)庫(kù)系統(tǒng)中數(shù)據(jù)一致性維護(hù)方法研究[J];國(guó)防科技大學(xué)學(xué)報(bào);2002年03期

5 許勝平;沈玲;;信息管理系統(tǒng)安全設(shè)計(jì)與應(yīng)用[J];城鎮(zhèn)供水;2003年03期

6 余莉;何隆華;;基于ArcSDE的礦產(chǎn)數(shù)據(jù)庫(kù)管理系統(tǒng)開發(fā)[J];計(jì)算機(jī)應(yīng)用;2009年S2期

7 朱秀麗;苗作華;;基于ArcGIS的基礎(chǔ)地理空間數(shù)據(jù)庫(kù)系統(tǒng)設(shè)計(jì)[J];山西建筑;2009年06期

8 周定輝;王樹海;李曉玲;趙雪磊;陸小輝;熊靜;王玲;焦大志;;基于Oracle和ArcSDE的遼寧省森林資源數(shù)據(jù)庫(kù)的設(shè)計(jì)與構(gòu)建[J];內(nèi)蒙古林業(yè)調(diào)查設(shè)計(jì);2008年02期

9 管麗娟;;基于MD5的軟件注冊(cè)碼的設(shè)計(jì)與實(shí)現(xiàn)[J];計(jì)算機(jī)應(yīng)用與軟件;2013年01期

10 楊仁華;劉培玉;;基于日志的安全審計(jì)系統(tǒng)研究與實(shí)現(xiàn)[J];信息技術(shù)與信息化;2009年04期

，

本文編號(hào)：2259092