本文全面分析了海军导弹技术资料管理系统所面临的安全威胁,介绍了在基于Web的技术资料管理系统基础之上,设计并实现的安全策略,该策略主要包括信息加密、信道加密、访问授权(包括用户信息加密、登录认证、权限设置和日志审计)、软件加密等内容。经应用表明,该策略构建一个涉密技术资料的保密应用环境,保障了数据的机密性、可用性和完整性。 This paper comprehensively analyzes the security threats faced by naval missile data management system, introduces the security strategy designed and implemented based on the web-based technical data management system. The strategy mainly includes information encryption, channel encryption, access authorization Including user information encryption, login authentication, permission settings and log audit), software encryption and so on. The application shows that this strategy builds a confidential application environment of confidential technical information and guarantees the confidentiality, availability and completeness of the data.