局域网安全风险分析与防范

为保障安全，局域网和互联网经常并不直接相连甚至物理隔离，但这并不能彻底解决局域网络的安全问题。局域网络面临着内部攻击、“摆渡”攻击、非法外联以及非法接入等安全威胁。局域网安全防范的措施与方法主要包括：加强系统认证方式的安全，防止非授权访问；安装主机防火墙，防范网络内部攻击；加强涉密信息介质的管理和使用；加密存储、传输涉密信息以及及时更新安全补丁，保持系统和应用软件的安全。

LAN Security Risk Analysis and Prevention

In order to guarantee the security, the local area networks（LANs） are indirectly connected to or isolated from the Internet. However, these measures still could not thoroughly resolve the security problem of the LANs. The main threats faced by LAN are attackers from inside the local network, ferry attack, illegal connection and illegal access. The techniques and measures for protecting LAN security include： to strengthen the security of system authentication, prevent unauthorized access, install host firewall, prevent attacks from inside, enhance management and use of the secret-involved media, encrypt the stored or transferred secret information, and timely update the security patches for the system or application software.