How can Shiqiao central primary school get to Qiaonan store of R

1. The update of patch and virus library is not timely, and the spread of worm virus is harmful by exploiting loopholes
because there are security loopholes in the hosts and devices of various platforms in the network, but the latest security patches are not applied in time, or there are hidden dangers in the software configuration of hosts and devices, the update of virus feature library of antivirus software lags behind the emergence of new viruses or is not updated in time, It provides an opportunity for malicious intruders, and makes the spread of viruses and worms possible. A large-scale outbreak of worms may result in the paralysis of the intranet and the failure of normal business
2. Illegal external connection is difficult to control, and internal important confidential information leakage occurs frequently
employees can bypass the monitoring of firewall through telephone line dialing, VPN dialing, GPRS wireless dialing, etc., and directly connect to the external network, opening the door to the outside, making it resources of enterprise intranet exposed to external attackers, and attackers or viruses can enter the enterprise intranet through dialing lines; On the other hand, the internal staff may leak the business secrets of the enterprise through this kind of unmonitored network channel, which will bring economic losses to the enterprise, but it is not easy to obtain evidence
3. Mobile computer devices can be accessed at will, and the security of network boundary is virtually nonexistent.
e to frequent access to various network environments, mobile devices used by employees or temporary outsiders, such as laptops and palmtops, are likely to carry viruses or trojans if they are not managed properly. Once they are not examined, they will be connected to the enterprise intranet, It may pose a huge threat to intranet security
4. Attack methods are changing with each passing day, and internal security is difficult to prevent.
Trojan horses or other malicious programs may be implanted in the broken intranet hosts, which may become the so-called "broiler" controlled by attackers. Attackers may use this as a springboard to further attack other intranet machines and steal business secrets, Or it can be used as a DDoS tool to send out a large number of attack packets, occupying a lot of network bandwidth. Employees browsing webpages embedded with Trojans or viruses and watching e-mails with malicious code may bring opportunities to attackers
5. Software and hardware assets are abused, asset security cannot be guaranteed, and network failures occur frequently
intranet assets (CPU, memory, hard disk, etc.) are replaced at will, and there is a lack of effective technical tracking means; Employees can change the IP address and other configuration of the machine they use at any time, which is not only difficult to manage in a unified way, but also very difficult to locate the responsibility in case of attack or security accident. The quantity of software and hardware can not be accurately grasped, and inventory is difficult; There are more and more computers, which cannot be managed centrally; Employees install software privately, resulting in the threat of illegal right use and low machine efficiency; Network applications are lack of monitoring, network abuse is serious
online chatting, online games and other behaviors seriously affect work efficiency, using QQ, MSN, ICQ and other instant messaging tools to spread the virus has become a new trend of the virus; Use bitorren, electric donkey and other tools to download movies, games, software and other large files, listen to songs, watch online movies, play online games, browse websites unrelated to work, chat and so on
7. Lack of peripheral management means, data leakage, virus transmission can not be controlled
peripheral is an important way of data exchange, including U disk, optical drive, printing, infrared, serial port, parallel port, etc; Due to the convenience of use, it has become the entrance and exit of data leakage and virus infection in recent years. It is difficult to manage the external devices flexibly by means of sealing ports and system requirements, especially the management of USB interface, so the existing problems must be solved by other technical means< Large and medium-sized enterprises generally have a perfect management system for confidential written documents, and a separate document control center is responsible for formulating, supervising and auditing the use of important internal intelligence information, which has achieved good results. However, these electronic documents are stored in the computer hard disk in plaintext. Due to the convenience and quickness of transmission, the important information stored in electronic format can not control the distributed documents, which greatly increases the difficulty of management. This part of the assets is extremely vulnerable to damage. There are numerous such cases. Mainly divided into: employees or outsiders will bring the computer into the unit LAN, he can enter the unit shared document server, employee computer steal confidential documents; Information entering these terminal computers can be leaked through storage devices and communication devices, such as USB storage; Through mail, FTP, BBS and other channels, the internal information of the unit is leaked to the external network
9. The management system is lack of basis, can not obtain evidence, and the security strategy can not be effectively implemented
although the security management system has been formulated for a long time, it can only rely on the staff's sense of responsibility, and can not effectively eliminate the problem; Through the original way: the relatively loose management mechanism such as affixing seals and regular inspection, there is no effective, flexible and real-time means to guarantee, even if there is a problem, it can not provide evidence basis, and some illegal personnel escape the constraints of the company's system and escape from the rules