高校网络攻防安全浅析——以伊犁师范大学为例

An Analysis of Network Attack and Defense Security in Colleges and Universities—Taking Yili Normal University as an Example

摘要: 随着信息技术的飞速发展，互联网已经深入人心，网络安全问题也相伴而生，针对高校信息基础设施的网络事件频发，侵犯个人隐私，窃取个人信息，网络诈骗等违法犯罪依然猖獗，网络安全的威胁来源和供给手段也在不断变化，网路攻击和防护是矛和盾的较量，只有深入了解网络攻击的技术方法和攻击路径，才能知己知彼，百战不殆。本文结合攻防演练中常用的攻击和防御手段，从攻防两端视角总结校园网攻击的路径和防护手段，助力高校一站式适配多种安全风险场景，构建实时自适应安全防护能力，搭建以人员和业务为核心的安全体系，全面提升校园网络安全，促进高校数字化安全转型。

Abstract: With the rapid development of information technology, the Internet has been deeply rooted in people’s hearts, network security issues are also accompanied by the frequent occurrence of network incidents against the university information infrastructure, invasion of personal privacy, theft of personal information, network fraud and other crimes are still rampant, network security threat sources and means of supply are also constantly changing, network attacks and protection is a battle of spears and shields, only an in-depth understanding of network attack techniques and attack paths can know the enemy and know ourselves. Only with an in-depth understanding of the technology of network attacks and attack paths can we know ourselves and the enemy and not be in danger. This paper combines the attack and defense means commonly used in attack and defense drills to summarize the path of campus network attack and protection means from the perspective of both attack and defense, to comprehensively enhance campus network security, to promote the digital transformation of schools, and to provide a reference for the reinforcement of campus network security in the biased areas.