| Development of financial informationalization promotes development of commercialbanks. It increases information security risk of commercial banks simultaneously. Multiplesources may result in information security, while one of the major sources is the securitythreat from access layer. Therefore, solving security issues from network access layer ofcommercial banks is extremely important. It will reduce security threats from commercialbanks’ access layer network, and increase ability to security defense of commercial banks’network and reduce the network information security risk of commercial banks.On the basis of conducting analysis and investigation on existing problems and currentsituation of commercial banks’network structure and safety, combing with commercial banks’access characteristics and requirements for users, the paper proposed a solution to security ofaccess layer. It differs from usual solution. Firstly reconstructed and transformed existingnetwork structure and network security policy in commercial banks. Direct access to originalcore layer from access layer was forbidden in network structure and security policy. Therefore,it relieved direct security threat on core layer from the access layer. Secondly, combing withapplication of desktop virtualization technology made users in access layer realize indirectaccess to application of core layer through virtual desktop. Thus, access demands of dailyproduction and official business are met.Through this way, users in access layer of commercial banks can access applications ofcore layer while forbidden communication to core layer, which resolve the security issue ofaccess layer. The solution is a beneficial supplement and improvement of typical solutions.With the continuous development of the server, storage technology and decrease of relativehardware cost, the solution of the overall deployment cost is decreased, so the solution will bemore and more extensive application. |