Xin'an Second Edition; Chapter 11 learning notes on the principle and application of network physical isolation technology

One 、 The outline of this chapter requires

11、 Principle and application of network physical isolation technology

11.1 Overview of network physical isolation

• The concept of network physical isolation • Working principle of network physical isolation

11.2 Network physical isolation system and type

• Composition of network physical isolation system • Two way network physical isolation system

• One way network physical isolation system • Terminal physical isolation system

11.3 Network physical isolation mechanism and Implementation Technology

• Special purpose computers • many PC• Internet proxy service • Internal and external network line switcher

• Internal and external partitions of a single hard disk • Dual hard disk

• Gatekeeper • Protocol isolation technology • Unidirectional transmission unit • Information ferry Technology • Physical disconnection Technology

11.4 Main technical indicators and products of network physical isolation

• Main technical indicators of network physical isolation （ Understanding of functional technical indicators 、 Understanding of performance and technical indicators 、 Understanding of safety technical indicators ）

• Analysis of working mechanism of network physical isolation products 、 Understanding of network physical isolation product standards 、 Applicable scenarios of network physical isolation products

11.5 Network physical isolation Application

• Intranet users can safely access the Internet

• The business production network is isolated from the Internet

• Internal and external network security physical isolation

• Information exchange in different security areas

Two 、 List of important and easy knowledge points in this chapter

11.1 Overview of network physical isolation

In order to achieve a higher level of network security , Network security experts suggest ,“ Internal and external networks and online computers realize physical isolation , In order to reduce the threat from the Internet ”.《 Regulations on the confidentiality management of the international networking of computer information systems 》 Article 6 of Chapter II stipulates ,“ A computer information system involving state secrets , It shall not be directly or indirectly connected with the Internet or other public information networks , Physical isolation must be carried out .”

It can meet the information and data exchange needs of internal and external networks , Security technology, which can prevent network security incidents, came into being , This technology is called “ Physical isolation