1引言网络安全是单位业务系统运维中最基本、最重要的部分。业务系统的安全风险存在于网络环境、操作系统、数据库、应用系统、用户等各个环节,相应的安全措施及对策也应该是自下而上分层管理和控制。本文以一个实际应用为例讨论单位业务系统网络环境安全方面的问题和措施。网络环境安全涉及网络结构、系统网络边界、用户访问及协议端口控制等安全问题。网络结构方面,为业务系统建立专 1 Introduction Network security is the most basic and important part of the operation and maintenance of a unit’s business system. Business system security risks exist in the network environment, operating system, database, application systems, users and other aspects, the corresponding security measures and countermeasures should be layered from bottom to top management and control. This article takes a practical application as an example to discuss the problems and measures in network business environment security. Network environment security involves network structure, system network boundary, user access and protocol port control and other security issues. Network structure, set up for the business system