mang ngan hang

8/9/2019 Mang Ngan Hang

1/22

I HC BCH KHOA THNH PH H CH MINHKhoa khoa hc v k thut my tnh

B mn k thut my tnh

n chuyn ngnh k thut my tnh

Ti: Thit k mng my tnh cho buildingca ngn hng

Gio vin hng dn: Nguyn L Duy Lai

Nhm thc hin:ng Hong Thin Phong 50601749Nguyn Th Dng 50600421

1


2/22

Mc lcI Gii thiu..3

II Tm hiu ti..3III Thit k chi tit 6

2


3/22

1. Gii thiu1.1Gii thiu v lch s hnh thnh v pht trin camy tnh,mng my tnh v internet

My tnh ca thp nin 1940 l cc thit b c-in t ln v rt d hng. S phtminh ra transistor bn dn vo nm 1947 to ra c hi lm ra chic my tnhnh v ng tin cy hn.

Nm 1950, ccmy tnh lnmainframe chy bi cc chng trnh ghi trn th cl (punched card) bt u c dng trong cc hc vin ln. iu ny tuy tonhiu thun li vi my tnh c kh nng c lp trnh nhng cng c rt nhiukh khn trong vic to ra cc chng trnh da trn th c l ny.

Vo cui thp nin 1950, ngi ta pht minh ra mch tch hp (IC) cha nhiu

transitortrn mt mubn dn nh, to ra mt bc nhy vt trong vic ch tocc my tnh mnh hn, nhanh hn v nh hn. n nay, IC c th cha hngtriu transistor trn mt mch.

Vo cui thp nin 1960, u thp nin 1970, cc my tnh nh c gi lminicomputerbt u xut hin.

Nm 1977, cng ty my tnh Apple Computergii thiu my vi tnh cng cgi l my tnh c nhn (personal computer- PC).

Nm 1981, IBM a ra my tnh c nhn u tin. S thu nh ngy cng tinh vi

hn ca cc IC a n vic s dng rng ri my tnh c nhn ti nh v trongkinh doanh.

Vo gia thp nin 1980, ngi s dng dng cc my tnh c lp bt u chia scc tp tin bng cch dng modem kt ni vi cc my tnh khc. Cch thc nyc gi l im ni im, hay truyn theo kiu quay s. Khi nim ny c mrng bng cch dng cc my tnh l trung tm truyn tin trong mt kt ni quays. Cc my tnh ny c gi l sn thng bo (bulletin board). Cc ngi dngkt ni n sn thng bo ny, li hay ly i cc thng ip, cng nh giln hay ti v cc tp tin. Hn ch ca h thng l c rt t hng truyn tin, v chvi nhng ai bit v sn thng bo . Ngoi ra, cc my tnh ti sn thng bo

cn mt modem cho mi kt ni, khi s lng kt ni tng ln, h thng khng thp ng c nhu cu.

Qua cc thp nin 1950, 1970, 1980 v 1990, B Quc phng Hoa K phttrin cc mng din rng WAN c tin cy cao, nhm phc v cc mc chqun s v khoa hc. Cng ngh ny khc truyn tin im ni im. N cho phpnhiu my tnh kt ni li vi nhau bng cc ng dn khc nhau. Bn thn mngs xch nh d liu di chuyn t my tnh ny n my tnh khc nh th no.

3
http://vi.wikipedia.org/wiki/M%C3%A1y_t%C3%ADnh_l%E1%BB%9Bnhttp://vi.wikipedia.org/wiki/M%C3%A1y_t%C3%ADnh_l%E1%BB%9Bnhttp://vi.wikipedia.org/wiki/Th%E1%BA%ADp_ni%C3%AAn_1950http://vi.wikipedia.org/wiki/Vi_m%E1%BA%A1chhttp://vi.wikipedia.org/w/index.php?title=Transitor&action=edit&redlink=1http://vi.wikipedia.org/wiki/Ch%E1%BA%A5t_b%C3%A1n_d%E1%BA%ABnhttp://vi.wikipedia.org/wiki/Ch%E1%BA%A5t_b%C3%A1n_d%E1%BA%ABnhttp://vi.wikipedia.org/wiki/Th%E1%BA%ADp_ni%C3%AAn_1960http://vi.wikipedia.org/wiki/Th%E1%BA%ADp_ni%C3%AAn_1960http://vi.wikipedia.org/wiki/Th%E1%BA%ADp_ni%C3%AAn_1970http://vi.wikipedia.org/wiki/Apple_Inc.http://vi.wikipedia.org/wiki/Apple_Inc.http://vi.wikipedia.org/wiki/IBMhttp://vi.wikipedia.org/wiki/M%C3%A1y_t%C3%ADnh_c%C3%A1_nh%C3%A2nhttp://vi.wikipedia.org/wiki/Th%E1%BA%ADp_ni%C3%AAn_1980http://vi.wikipedia.org/wiki/Modemhttp://vi.wikipedia.org/wiki/B%E1%BB%99_Qu%E1%BB%91c_ph%C3%B2ng_Hoa_K%E1%BB%B3http://vi.wikipedia.org/wiki/Th%E1%BA%ADp_ni%C3%AAn_1950http://vi.wikipedia.org/wiki/Vi_m%E1%BA%A1chhttp://vi.wikipedia.org/w/index.php?title=Transitor&action=edit&redlink=1http://vi.wikipedia.org/wiki/Ch%E1%BA%A5t_b%C3%A1n_d%E1%BA%ABnhttp://vi.wikipedia.org/wiki/Th%E1%BA%ADp_ni%C3%AAn_1960http://vi.wikipedia.org/wiki/Th%E1%BA%ADp_ni%C3%AAn_1970http://vi.wikipedia.org/wiki/Apple_Inc.http://vi.wikipedia.org/wiki/IBMhttp://vi.wikipedia.org/wiki/M%C3%A1y_t%C3%ADnh_c%C3%A1_nh%C3%A2nhttp://vi.wikipedia.org/wiki/Th%E1%BA%ADp_ni%C3%AAn_1980http://vi.wikipedia.org/wiki/Modemhttp://vi.wikipedia.org/wiki/B%E1%BB%99_Qu%E1%BB%91c_ph%C3%B2ng_Hoa_K%E1%BB%B3http://vi.wikipedia.org/wiki/M%C3%A1y_t%C3%ADnh_l%E1%BB%9Bn


4/22

Thay v ch c th thng tin vi mt my tnh ti mt thi im, n c th thngtin vi nhiu my tnh cng lc bng cng mt kt ni. Sau ny, WAN ca BQuc phng Hoa K tr thnh Internet.

1.2.ng Dng Ca Mng My Tnh:

Trong cc t chc: Trc khi c mng, trong cc t chc, mi ni u phi cch lu tr d liu ring, cc thng tin trong ni b s kh c cp nht kp thi;mt ng dng ni ny khng th chia s cho ni khc. Vi mt h thng mngngi ta c th:

- Chia s cc ti nguyn: Cc ng dng, kho d liu v cc ti nguyn khcnh sc mnh ca cc CPU c dng chung v chia s th c h thngmy tnh s lm vic hu hiu hn.

- tin cy v s an ton ca thng tin cao hn: Thng tin c cp nhttheo thi gian thc, do chnh xc hn. Mt khi c mt hay vi my tnhb hng th cc my cn li vn c kh nng hot ng v cung cp dch vkhng gy ch tc.

-Tit kim: qua k thut mng ngi ta c th tn dng kh nng ca hthng, chuyn mn ho cc my tnh, v do phc v a dng ho hn.Th d: H thng mng c th cung cp dch v sut ngy v nhiu ni cth dng cng mt chng trnh ng dng, chia nhau cng mt c s dliu v cc my indo tit kim c rt nhiu chi ph.

- Ngoi ra, khi to mng, ngi ch ch cn u t mt hoc vi my tnhc kh nng hot ng cao lm my ch cung cp cc dch v chnh yuv a s cn li l cc my khch dng chy cc ng dng thngthng v khai thc hay yu cu cc dch v m my ch cung cp. Mt hthng nh vy gi l mng c kiu ch-khch (client-server model).Ngi ta cn gi cc my dng ni vo my ch l my trm (work-station). Tuy nhin, cc my trm vn c th hot ng c lp m khngcn n cc dch v cung cp t my ch.

- Mng my tnh cn l mt phng tin thng tin mnh v hu hiu giacc cng s trong t chc.

Cho nhiu ngi: H thng mng cung cp nhiu tin li cho s truyn thng tintrong cc mi quan h ngi vi ngi nh l:

- Cung cp thng tin t xa gia cc c nhn

4
http://vi.wikipedia.org/wiki/Internethttp://vi.wikipedia.org/wiki/CPUhttp://vi.wikipedia.org/wiki/CPUhttp://vi.wikipedia.org/w/index.php?title=Th%E1%BB%9Di_gian_th%E1%BB%B1c&action=edit&redlink=1http://vi.wikipedia.org/w/index.php?title=Th%E1%BB%9Di_gian_th%E1%BB%B1c&action=edit&redlink=1http://vi.wikipedia.org/w/index.php?title=Ch%C6%B0%C6%A1ng_tr%C3%ACnh_%E1%BB%A9ng_d%E1%BB%A5ng&action=edit&redlink=1http://vi.wikipedia.org/w/index.php?title=Ch%C6%B0%C6%A1ng_tr%C3%ACnh_%E1%BB%A9ng_d%E1%BB%A5ng&action=edit&redlink=1http://vi.wikipedia.org/wiki/C%C6%A1_s%E1%BB%9F_d%E1%BB%AF_li%E1%BB%87uhttp://vi.wikipedia.org/wiki/C%C6%A1_s%E1%BB%9F_d%E1%BB%AF_li%E1%BB%87uhttp://vi.wikipedia.org/wiki/M%C3%A1y_inhttp://vi.wikipedia.org/wiki/M%C3%A1y_inhttp://vi.wikipedia.org/wiki/M%C3%A1y_ch%E1%BB%A7http://vi.wikipedia.org/w/index.php?title=M%C3%A1y_kh%C3%A1ch&action=edit&redlink=1http://vi.wikipedia.org/w/index.php?title=M%C3%A1y_kh%C3%A1ch&action=edit&redlink=1http://vi.wikipedia.org/w/index.php?title=Ki%E1%BB%83u_ch%E1%BB%A7-kh%C3%A1ch&action=edit&redlink=1http://vi.wikipedia.org/wiki/Workstationhttp://vi.wikipedia.org/wiki/Internethttp://vi.wikipedia.org/wiki/CPUhttp://vi.wikipedia.org/w/index.php?title=Th%E1%BB%9Di_gian_th%E1%BB%B1c&action=edit&redlink=1http://vi.wikipedia.org/w/index.php?title=Ch%C6%B0%C6%A1ng_tr%C3%ACnh_%E1%BB%A9ng_d%E1%BB%A5ng&action=edit&redlink=1http://vi.wikipedia.org/wiki/C%C6%A1_s%E1%BB%9F_d%E1%BB%AF_li%E1%BB%87uhttp://vi.wikipedia.org/wiki/C%C6%A1_s%E1%BB%9F_d%E1%BB%AF_li%E1%BB%87uhttp://vi.wikipedia.org/wiki/M%C3%A1y_inhttp://vi.wikipedia.org/wiki/M%C3%A1y_ch%E1%BB%A7http://vi.wikipedia.org/w/index.php?title=M%C3%A1y_kh%C3%A1ch&action=edit&redlink=1http://vi.wikipedia.org/w/index.php?title=Ki%E1%BB%83u_ch%E1%BB%A7-kh%C3%A1ch&action=edit&redlink=1http://vi.wikipedia.org/wiki/Workstation


5/22

- Lin lc trc tip v ring t gia cc c nhn vi nhau

- Lm phng tin gii tr chung: nh cc tr chi, cc th tiu khin, chias phim nh qua mng.

- Cc ng dng quan trng hin ti qua mng l:th in t, hi nghtruyn hnh (video conference),in thoi Internet, giao dch v lp hc o(e-learninghay virtual class), dch v tm kim thng tin qua cc my truytm.

Cc vn x hi: Quan h gia ngi vi ngi tr nn nhanh chng, d dng vgn gi hn cng mang li nhiu vn x hi cn gii quyt nh:

- Lm dng h thng mng lm iu phi php hay thiu o c: Cc t chc

bun ngi, khiu dm, lng gt, hay ti phm qua mng, t chc tin tc ncp ti sn ca cng dn v cc c quan, t chc khng b, ...

- Mng cng ln th nguy c lan truyn cc phn mm c tnh cng d xy ra.

- H thng bun bn tr nn kh kim sot hn nhng cng to iu kin cho cnhtranh gay gt hn.

- Mt vn ny sinh l xc nh bin gii gia vic kim sot nhn vin lmcng v quyn t hu ca h. (Ch th mun ton quyn kim sot cc in thhay cc cuc tr chuyn trc tuyn nhng iu ny c th vi phm nghim trng

quyn c nhn).- Vn gio dc thanh thiu nin cng tr nn kh khn hn v cc em c ththam gia vo cc vic trn mng m cha m kh kim sot ni.

- Hn bao gi ht vi phng tin thng tin nhanh chng th s t do ngn lunhay lm dng quyn ngn lun cng c th nh hng su rng hn trc y nhl cc trng hp ca ccphn mm qung co (adware) v ccth rc (spammail)...

1.3.Gii Thiu V Ti:

Ngy nay Internet tr nn ph bin khp ni trn th gii,thng tin lin lc, tm kim vchia s thng tin tr nn d dng v thun tin.Trong cc t chc th vic xy dng mt hthng mng nhm chia s thng tin l ht sc cn thit nht l i vi ngn hng. tica nhm c m t nh sau:

5
http://vi.wikipedia.org/wiki/Th%C6%B0_%C4%91i%E1%BB%87n_t%E1%BB%ADhttp://vi.wikipedia.org/wiki/Th%C6%B0_%C4%91i%E1%BB%87n_t%E1%BB%ADhttp://vi.wikipedia.org/w/index.php?title=H%E1%BB%99i_ngh%E1%BB%8B_truy%E1%BB%81n_h%C3%ACnh&action=edit&redlink=1http://vi.wikipedia.org/w/index.php?title=H%E1%BB%99i_ngh%E1%BB%8B_truy%E1%BB%81n_h%C3%ACnh&action=edit&redlink=1http://vi.wikipedia.org/wiki/VoIPhttp://vi.wikipedia.org/wiki/VoIPhttp://vi.wikipedia.org/wiki/M%C3%A1y_truy_t%C3%ACm_d%E1%BB%AF_li%E1%BB%87uhttp://vi.wikipedia.org/wiki/M%C3%A1y_truy_t%C3%ACm_d%E1%BB%AF_li%E1%BB%87uhttp://vi.wikipedia.org/wiki/Ph%E1%BA%A7n_m%E1%BB%81m_%C3%A1c_t%C3%ADnhhttp://vi.wikipedia.org/wiki/Ph%E1%BA%A7n_m%E1%BB%81m_gi%C3%A1n_%C4%91i%E1%BB%87phttp://vi.wikipedia.org/wiki/Th%C6%B0_r%C3%A1chttp://vi.wikipedia.org/wiki/Th%C6%B0_r%C3%A1chttp://vi.wikipedia.org/wiki/Th%C6%B0_%C4%91i%E1%BB%87n_t%E1%BB%ADhttp://vi.wikipedia.org/w/index.php?title=H%E1%BB%99i_ngh%E1%BB%8B_truy%E1%BB%81n_h%C3%ACnh&action=edit&redlink=1http://vi.wikipedia.org/w/index.php?title=H%E1%BB%99i_ngh%E1%BB%8B_truy%E1%BB%81n_h%C3%ACnh&action=edit&redlink=1http://vi.wikipedia.org/wiki/VoIPhttp://vi.wikipedia.org/wiki/M%C3%A1y_truy_t%C3%ACm_d%E1%BB%AF_li%E1%BB%87uhttp://vi.wikipedia.org/wiki/M%C3%A1y_truy_t%C3%ACm_d%E1%BB%AF_li%E1%BB%87uhttp://vi.wikipedia.org/wiki/Ph%E1%BA%A7n_m%E1%BB%81m_%C3%A1c_t%C3%ADnhhttp://vi.wikipedia.org/wiki/Ph%E1%BA%A7n_m%E1%BB%81m_gi%C3%A1n_%C4%91i%E1%BB%87phttp://vi.wikipedia.org/wiki/Th%C6%B0_r%C3%A1c


6/22

Cng ty CCC (Computer & Construction Concept) c yu cu thit k mng my tnhdng trong tr s ca mt Ngn hng BBB (B Bank Building) chun b xy mi. Ccthng s quan trng ca vic s dng CNTT trong Ngn hng nh sau :

- Ta building cao khong 8 tng, mi tng c trang b 1 phng k thut Mng

v cabling central local.- BBB dng Medium Enterprise: 600 workstations, 30 Servers, 20 NetworkEquipments.

- Dng new technology v h tng mng, 100/1000 Mbps, wireless.

Dng kt hp gia Priopriety v Open source Softwares.

- Kt ni vi bn ngoi bng Leased line v ADSL.

- ng dng vn phng, client-server, a phng tin, database.

Bo mt cao, an ton khi xy ra s c, d dng nng cp h thng.

2.Tm hiu ti2.1. Tm hiu cu trc Mng lin quan n to nh

2.1.1M t cu trc h thng tng qut:

Cu trc bo mt mng d kin xy dng s da trn cu trc mng bao gm cc phn sau:

Phn h kt ni Internet v truy cp t xa

Phn ny c trang b cc thit b kt ni Gateway Cisco Router ring kt ni vi mng

Internet, cho php m rng v nng cp tc cng kt ni Internet tu theo nhu cu pht trin.Ngi dng truy nhp vo mng c xc thc tu theo quyn truy nhp vo mng ni bhoc Internet v CSDL dng xc thc c qun l tp trung trn my ch ACS t vngqun tr h thng.

Phn h mng DMZ

Gm h thng my ch Web, E-mail, dnh cho khch hng, ni b truy nhp, trn mych Web gm c cc h thng giao dch trn WEB ca Ngn hng, Internet Banking, homeBanking, cc thng tin qung co, tra cu cc sn phm ca ngn hng, cc h thng o to, dyhc in t ni b. My ch Email ca cc ti khon ni b hay khch hng, my ch Web cci cc b lc theo cc ni dung, cc a ch trang WEB, ngoi ra ti khu vc ny cn c cc my

ch Virus kin tra Virus i vi cc thng tin vo ra Internet.Phn h mng ni b:

Bao gm cc client t trn cc tng ca ta nh, phc v cho cc nhn vin lm vic,duyt web, gi mail...

Ngoi ra cn c th phn theo cch sau:

6


7/22

Phn h my ch v ng dng:

Cc my ch ng dng cha cc CSDL dnh cho cc ng dng , ht sc quan trng dovy khu vc ny cn c m bo mc an ninh bo mt cao.

Phn h qun tr mng

Bao gm cc my ch qun tr an ninh, my ch xc thc , my ch qut cc dch v trnmng (IDS)

Phn h kt ni ra bn ngoi (EXTRANET)

Dnh cho cc kt ni t cc n v bn ngoi hoc bn ngoi truy cp vo mng ca Ngnhng

Phn h my ch CSDL

Cc my ch ng dng cha cc CSDL chnh, ht sc quan trng do vy khu vc ny cn

c m bo mc an ninh bo mt cao nht.Phn h kt ni WAN ca ngn hng

Phn kt ni vo cng Gateway Firewall, nhm bo v cc giao dch t bn ngoi vo

-S chi tit c m t bi hnh di y.

7


8/22

2.2 . Danh sch cc thit b cn thit

2.2.1. Cc Server:Trong mt ngn hng thit yu phi c cc server sau:

-Web server: nhng khch hng bn ngoi truy cp vo ly

thng tin v ti khon ca h trong ngn hng cng nh cc dch vkhc.-Mail server: gi v nhn mail.-File server: chia s cc thng tin.-DNS server: dch tn min ra a ch IP-Database server: lu tr thng tin-Backup server: Cha thng tin backup

8


9/22

Cc server cn phi c cu hnh mnh phc v cho nhiu truy xut ngthi v lin tc.

2.2.2.H thng my tnh trn cc tng:S lng my ca ta nh l khong 600 my gi s c phn bu trn 8 tng, nh vy ta c lng mi tng c khong 75 my,do ta s dng mi tng 4 switch Cisco Catalyst 2960(mi switchc 24 port), v c kt ni n core-switch Builder 9000, v hthng my tnh cho ngn hng c t trn mt interface khc cafirewall.

2.2.3. Core-switch:L mt switch layer 2 nhng c tc cao dng kt ni ccswitch trn cc tng li vi nhau. Ta chn Core Builder 9000.

2.2.44. Firewall: m bo tnh bo mt thng tin th vic xy dng mt firewall lvn thit yu, nht l i vi ngn hng. Ta chn firewall 5540IDS..

2.2.5. Router:Mt thit b khng th thiu i vi bt k mt h thng Mng nomun k ni ra ngoi, ta chn router cisco 3662 v router 2650XM,

2.2.6.Checkpoint :Ngn chn mt s dch v v hn ch s tn cng t bn ngoi voDMZ , khi bn ngoi kt ni vi cc Vlan, y ta s dng PIX51

2.2.7. Access-point: Ngn hng cung cp dch v truy cp mng khng dy khch c th truy cp khi n giao dch ngn hng.

3.Thit k chi tit

- Tnh ton throughput,bandwidth v cc thng s an ton .

- Dng kt hp gia Priopriety v Open source Softwares.

- Kt ni vi bn ngoi bng Leased line v ADSL.

- ng dng vn phng, client-server, a phng tin, database.

-Bo mt v an ton khi xy ra s c, nng cp h thng.

9


10/22

3.1 Tnh ton throughput,bandwidth v cc thng s an tonTrc tin ta tm hiu s qua v cc khi nim throughput:

- Throughput : l lng thng tin truyn qua mt mng trong mtn v thi gian.

- Bandwidth : l lng thng tin c th truyn qua mt mngtrong mt n v thi gian

C th hiu mt cch hnh tng th bandwidth ging nh l mt ngng c th cho mt lng thng tin ti a c th chy qua trn mt n vthi gian, cn throughput l lng thng tin thc t chy qua ng ng trong mt n v thi gian.Vic xc nh throughput v bandwidth trong mt mng l rt quan trng biv n gip cho ngi qun tr mng xc nh c cn thu ng truyn

nh th no cho mng va chy n nh li va tit kim c chi ph chovic thu ng truyn

Theo tm hiu ca nhm em th cc dch v mng m ngn hng hay sdng nhiu nht gm c:

- Gi v nhn mail- Duyt web- Cung cp dch v web serer bn ngoi truy cp vo.- Cp nht c s d liu vi cc tr s khc.

Gi s trong mt ngy mt my tnh ca nhn vin dng cho vic gi vnhn mail vi tn sut 30 email/ngy v kch thc ca mi email l 50KBnhng ch tp trung vo gi hnh chnh(8h/ngy). Do throughput cncung cp cho dch v gi v nhn mail ny l:

30 email*600 my*50 KB*8/(1024*(8h*3600)) = 0,25MbpsCc my tnh cn c dng duyt web v ti ti liu, gi s mt ngy

trung bnh mt my tnh cn 3MB cho vic duyt web v ti ti liu v vic ny chxy ra trong gi hnh chnh (8h/ngy). Nh vy throughput cn cung cp cho dchv ny l

3MB*600 my*8/(8h *3600) = 0,5 Mbps

i vi mt ngn hng th vic trao i thng tin gia cc tr s ca ngn hng vgia ngn hng ny vi ngn hng khc.

Gi s trung bnh mt ngy mt chi nhnh hay i tc gi cp nhtkhong 100MB, gi s ngn hng c khong 10 chi nhnh v 20 i tc, nhvy thng lng cn cung cp cho dch v ny l

100MB*8*30/(24*60*60) = 0,28Mbps

10


11/22

Nh vy tng throughput l :0,25 + 0,5 + 0,28 1Mbps

Tng lng throughput hin ti l 1,45Mbps nhng ta cn phi tnh ton chotrng hp nhn s tng ln hng nm, hay vic tng cc tr s, cc chi nhnh, cci tc v vic m rng webserver nn trong qu trnh thit k ta cn tng thm20% so vi throughput tnh ton hin ti(20% y l h s an ton), nh vylng throughput thit k l:

1*1,2 = 1,2MbpsVi throughput thit k l 1,2 Mbps cn thu mt ng truyn c n nh cao,v c bandwidth ti thiu bng vi throughput thit k, y ta s chn ngtruyn c tc l 1,2 Mbps.

Vic tnh throughput v bandwidth nh vy ta tnh ton mc p ng gi caoim th mng vn hot ng tt.

3.2.Dung kt hp gia Priopriety v Open source Softwares

Trc tin cn tm hiu xem Open source Softwares l g? Dch theo tingVit th Open source Softwares ngha l nhng phn mm c m ngun m. Opensource software hiu theo ngha rng l mt khi nim chung c s dng cho tt

c cc phn mm m m ngun ca n c cng b rng ri cng khai v chophp mi ngi tip tc pht trin phn mm . iu ny khng c ngha l chngc th c sao chp, sa cha thoi mi hay s dng vo mc ch no cngc. M ngun m c cng b di rt nhiu iu kin khc nhau, mt s trong cho php pht trin, s dng v bn ty min l gi nguyn cc dng v ngungc sn phm, mt s bt buc tt c cc sn phm lm ra t cng phi l open-source, mt s khc i hi phi cng b trn vn m ngun, mt s khc khngcho php s dng vo mc ch thng mi, mt s khc li khng c rng buc gng k v.v. Qua ta thy khi nim open source khng th chun xc m mun

ni n tnh php l ca vic s dng cc phn mm m ngun m chng ta phixem xt n iu kin s dng c th m di chng c cng b. Vit

Nam trong cc c quan hnh chnh ang c khuyn khch s dng Open sourcesoftware. Mt s Open source software ph bin nht hin nay:

11


12/22

- H iu hnh Linux: H iu hnh m ngun m bao gm nhiuphin bn nh: ubuntu, fedora, redhat

- Phm mm vn phng OpenOffice: B phn mm vn phng c

cc tnh nng tng t nh Microsoft Office nhng xy dng tm ngun m, c th hot ng trn nhiu h iu hnh khcnhau, cc phin bn ca h iu hnh Linux hay tnh hp snOpenOffice cho ngi s dng.

- Phm mm Mozilla Thunderbird: phn mm gi v nhn thxy dng trn m ngun m, tnh nng tng ng viMicrosoft office outlook.

- Trnh duyt Mozilla Firefox: Trnh duyt Firefox l mt snphm min ph v m ngun m ca hng Mozilla. Firefox ckh nng chy trn nhiu h iu hnh, c kch thc nh gn,tc cao v rt d s dng, n ang l i th cnh tranh trctip vi Internet Explorer ca Microsoft v ngy cng cnhiu ngi s dng.

- Unikey: Phn mm g ting Vit thng dng nht Vit Namhin nay, c th chy trn nhiu h iu hnh, trong Windows

n l Unikey, trong Linux n l X-Unikey.Ngoi ra cn nhiu open source software khc nhng v khng c thi gianlit k nhiu nn ch lit k nhng phn mm thng dng nht.

Vic s dng phn mm trong h thng ngn hng ty thuc vo chc nngc th ca mi my tnh, vn t ra y l vic u tin s dng Open sourceSoftwares v s quen thuc, d s dng ca phn mm i vi ngi s dng.

H iu hnh:

- i vi cc my client ta s dng h iu hnh windows XP v n qu quen thuc v rt d s dng i vi ngi dng.

- i vi File server v c th ca n c cha ti liu ca tng phngban, phng ban ny khng c truy xut vo c s d liu ca phng bankhc khi cha c php, do ta phi s dng c ch qun l user v

12


13/22

group, trong vic qun l user v group th windows server c tnh nng bomt tt hn so vi linux, nn ta s dng windows server 2k3 cho File server

- Vi cc server khc c qun l bi cc chuyn vin qun tr, v

cn tnh nng bo mt cao do c th s dng h iu hnh linux cho ccserver ny.

B phn mm vn phng: Chng ta c hai la chn l Microsoft Officev Open Office, mi b sn phm iu c th mnh ring ca n, Microsoft th qu quen thuc vi mi ngi v hu ht trong mi c quan, t chc Vit Namiu s dng b sn phm nay nhng n li l phn mm khng min ph, gi qucao. Ngc li Open office l b sn phm hon ton min ph nhng cha c

bit n nhiu Vit Nam, tnh nng tng t vi Microsoft Office, tuy nhin c

mt s vn v s tng thch gia hai b sn phm ny, mt ti liu vit trnopen office khi em qua Microsoft Office c th c th s khng ng vi nhdng ca ngi vit bn open office. Xt theo hin trng v vic s dng phn mmvn phng Vit Nam hin nay th vic s dng open Office l cha ph hp nntrong cc my tnh lm vic nn s dng Microsoft office.

Phn mm gi v nhn mail: Trong windows XP ca Microsoft c tchhp sn phn mm Outlook cho ngi dng gi v nhn th, tuy nhin MozillaThunderbird cng l mt la chn khng ti cho cng vic ny, tnh nng khng

thua km Outlook d dng s dng, h tr y cc giao thc gi v nhn mail.v quan trng hn n l phn mm Open source.

Trnh duyt web: Internet Explorer(IE) cng c tch hp sn trongWindows tuy nhin Mozilla Firefox(FF) li c nhiu tnh nng vt tri hn so viIE, hin ti th phn ca FF ngy cng tng trong khi IE ngy cng gim v mt dnv th c tn ca mnh. FF c tc duyt web nhanh hn, bo mt tt hn li ccc addon h tr thm nhiu tnh nng, FF cng l phn mm open source, l s lachn tuyt vi duyt web cho my tnh hin nay.

Web server: S dng b phn mm tch hp nh WAMP server h tr cApache,Mysql,php y l b phn mm m ngun m xi tng i tt cho webserver.

3.3Kt ni vi bn ngoi bng Leased-line v ADSL.

13


14/22

Mt h thng mng ca ngn hng cn phi kt ni ra ngoi internet traoi thng tin, c hai cch i ra internet thng dng nht hin nay l Leased-linev ADSL, ta tm hiu s qua c trng, u im, khuyt im ca tng ci trckhi a ra vic la chn thch hp:

Leased-line: Leased line l dch v cung cp ng truyn cho cc doanhnghip, t chc c nhu cu s dng Internet tc cao, n nh mt cch thngxuyn vi dung lng truyn ti ln.

Th mnh ca dch v Leased line chnh l tnh linh hot, s n nh, kt ni timi a im m khch hng yu cu.

Ngoi ra Leased line ng dng cc cng ngh nh Mng ring o (VPN), Hi thot xa (Video Conferencing), in thoi Internet (IP Phone) tr nn d dng v tindng hn, t cp nht, kim sot cc thng tin trn Website ca mnh, c th cho

php cc my khch truy nhp t xa qua ng Dial-up.

Xu hng s dng knh thu bao ring cho doanh nghip ( Leased Line ADSL)chnh l mt trong nhng gii php ci thin tnh hnh ny. Leased line hay cn gil dch v Internet trc tip l mt ng truyn ring, ni t trm chnh ca nhcung cp dch v n nh khch hng.

u im ca dch v ny l ti a ha tc kt ni vi tc ti xung v ti lnngang bng nhau ti mi thi im. Cht lng ng truyn c n nh v m

bo kt ni 24/24. Dch v ny thc s thch hp vi cc khch hng t cc cng tynh n cc tp on ln, nhng vn phng yu cu ng truyn nhanh, n nh

cn truyn ti d liu ln qua mng Internet.

bo mt cao, tc nhanh v ng vi gi cc m nh cung cp dch v cam kt l nhng u th ca cc dch v truyn d liu nh Leased line. Tuy nhin,theo phn nh ca nhiu doanh nghip, gi cc cn qu cao. y l mt nguynnhn gii thch v sao nhng dch v truyn s liu cao cp ny cha ph bin rngri nh cc dch v thng thng khc

ADSL:ADSL l t vit tt ca Ting Anh: Asymmetric Digital SubscriberLine dch sang ting Vit l ng dy thu bao s bt i xng, l mt dng caDSL.

ADSL cung cp mt phng thc truyn d liu vi bng thng rng, tc caohn nhiu so vi phng thc truy cp qua ng dy in thoi truyn thng theo

phng thc quay s (Dial up).Khi truyn bng thng trn ng dy in thoic tch ra lm 2 phn, 1 phn nh dng cho cc tn hiu nhu Phone,Fax. phn

14
http://vi.wikipedia.org/wiki/Ti%E1%BA%BFng_Anhhttp://vi.wikipedia.org/wiki/DSLhttp://vi.wikipedia.org/wiki/%C4%90i%E1%BB%87n_tho%E1%BA%A1ihttp://vi.wikipedia.org/wiki/Ti%E1%BA%BFng_Anhhttp://vi.wikipedia.org/wiki/DSLhttp://vi.wikipedia.org/wiki/%C4%90i%E1%BB%87n_tho%E1%BA%A1i


15/22

ln cn li dng cho truyn ti tn hiu ADSL. ngha ca cm t "bt i xng"trong ADSL l do lng d liu ti xung v ti ln l khng bng nhau, vi dliu ch yu l ti xung.

Trong khi truy cp theo phng thc quay s ch c th cung cp tc ln n56kbps, mt ng ADSL chun c th t tc ti xung n 8Mbps. Cho nhin nay, vi ADSL 2+ do cc nh cung cp ng truyn Internet ti Vit Namnh SPT, FPT,Netnam, Viettel,VNPT tc l thuyt ti xung c th t n24Mbps.

Tuy nhin, do c s h tng cn thp, v cng do chnh sch qun l cha tt, vncn nhiu bt cp trong vn ng truyn Vit Nam. C lc tc truyn tica FPT gim xung cn zero hoc ch 5Kb/s. Viettel c nh gi tt hn nhngcng cn nhiu phn nn v tc gi cao im.

Nhn chung hin ti Vit Nam th vic s dng ADSL l thng dng hn bi vgi thnh thp, tc cao ph hp cho ngi dng c nhn v cc doanh nghipnh, tuy nhin vi mt h thng ngn hng th mt yu t ti quan trng chnhl s n nh ca mng. Mc khc v gi thnh ca leased-line rt t nu dng ncho vic duyt web, download ti liu l ht sc lng ph do ta ch cn thu mtng leased-line 1,2 Mbps phc v cho vic cp nht d liu v serverweb vmt ng ADSL 8Mbps phc v cho vic duyt web, trao i ti liu v dch vmail.

3.4.Bo mt v an ton khi xy ra s c, nng cp h thng.

3.4.1.Yu cu i vi h thng:

Hot ng ca ngn hng lun c khi lng thng tin x l trong hot ngnghip v rt ln. Tuy nhin khng phi ai cng c quyn truy nhp nhng

kho thng tin ny. Do ngn hng c nhu cu xy dng mt h thng bomt cho mng tin hc phc v iu hnh, kinh doanh. H thng bo mt ny

phi m bo cc yu cu sau:

- Bo m an ton cho ton b thng tin trn mng, chng li mi s

truy nhp bt hp php vo mng. S truy nhp y s c tin

hnh khi ngn hng kt ni ra Internet.

15
http://vi.wikipedia.org/wiki/Internethttp://vi.wikipedia.org/wiki/Vi%E1%BB%87t_Namhttp://vi.wikipedia.org/wiki/SPThttp://vi.wikipedia.org/wiki/FPThttp://vi.wikipedia.org/wiki/Netnamhttp://vi.wikipedia.org/wiki/Viettelhttp://vi.wikipedia.org/wiki/VNPThttp://vi.wikipedia.org/wiki/Internethttp://vi.wikipedia.org/wiki/Vi%E1%BB%87t_Namhttp://vi.wikipedia.org/wiki/SPThttp://vi.wikipedia.org/wiki/FPThttp://vi.wikipedia.org/wiki/Netnamhttp://vi.wikipedia.org/wiki/Viettelhttp://vi.wikipedia.org/wiki/VNPT


16/22

- Kim sot c mi hnh ng truy nhp vo mng ca ngi s

dng. m bo an ninh t nhng ngi s dng bn trong ngn hng.

- C kh nng bo m an ton d liu truyn, nhn qua cc dch v

ng truyn ra internet. C gii php hu hiu ngay khi mng ngnhng b thm d truy nhp.

- Chi ph ph hp vi d tr kinh ph ca ngn hng.

- p ng c kh nng m rng ca mng ngn hng trong tng

lai: m rng v s lng my trm, s lng my ch, cc mng LAN v cc

ng dng.

3.4.2 Xc nh cc ti nguyn cn c bo v:

Vn quan trng l phi xc nh c cc ti nguyn ca mng ngn hngc th b tc ng bi h thng bo mt. Cc ti nguyn cn c bo v:

- Phn cng: Cc my ch ca mng, cc my trm, cc thit b mng

(Routers, Access Servers).

- Phn mm: Do c th ca ngn hng l phc v hot ng kinh

doanh tin t trn ton lnh th Vit Nam v lin h cht ch vi cc

ngn hng nc ngoi, cc t chc tn dng quc t nn cc phn mmcn c bo v: H iu hnh ca cc my ch UNIX, Windows NT,

Novell. Ngoi ra cc chng trnh ng dng: qun l h thng ti

khon, tn dng, cc chng trnh k ton, t ng ho vn phng,

truyn d liu, ATM ...

- D liu: y l phn quan trng cn c bo v nht ca ngn

hng. D liu ny s gm c cc d liu ti khon lin quan n khch

hng, d liu k ton, th tn dng, ATM. Cc d liu ny rt quantrng i vi ngn hng nn s phi c bo v an ton nht.

- Con ngi: l ngi s dng tham gia vo mng.

- Ti liu: Cc cng vn, bo co, ti liu, sch v, ti liu hng dn

s dng,...

16


17/22

3.4 .3 Xc nh cc mi e da i vi h thng :

Sau khi xc nh tt c cc ti nguyn phi c bo v,cn phi xc nhmi e da i vi cc ti nguyn . Cc mi e do gm c:

- Nhng truy nhp bt hp php. Vic truy nhp vo cc ti nguynca mng ch nn c thc hin bi nhng ngi xc nh. Mi

e do chung m mi ngi quan tm l vic truy nhp bt hp php.

c th ca mi e do ny l s dng tn ca ngi khc truy

nhp vo mng v ti nguyn ca n.

- Mi e do bi s khai thc rng ri thng tin. Trc khi cng b

hay cho php mi ngi khai thc rng ri vo mt ngun thng tin

no cn phi xc nh gi tr ca cc thng tin .Vic cng b filecha mt khu ca ngi truy nhp vo mng s gy ra mt mi e

do ln cho mng. Thng tin c th b xm phm khi:

+Thng tin c lu gi trn my tnh.

+Thng tin c truyn t h thng ny sang h thng khc.

+Thng tin c lu gi trong tp sao lu (backup).

- Mi e do nh hng n hot ng bnh thng ca h thng(Denial of Service). Mng thng tin ngn hng kt ni cc ti nguyn

c gi tr nh my tnh, CSDL v cung cp dch v cho mi thnh vin

ca mng. Tt c ngi s dng ca mng u tin rng mi hot ng

ca mng u lm cho cng vic ca h tr nn c hiu qu. Nu

mng khng lm vic th s c nhng mt mt trong hot ng kinh

doanh. Do mi e do nh hng n hot ng bnh thng ca

mng cng cn c xem xt:

+ Mng tr nn khng hot ng c bi mt khi d liu

lang thang.

+ Mng tr nn km hiu qu bi qu ti ca d liu.

17


18/22

+ Mng c th b chia nh do s ngng hot ng ca mt thit

b mng.

+ Virus lm ph hoi d liu hay hng mt my no .

+ Thit b dng bo v mng c th b ph v.

- Mi e do t bn trong. Ngi s dng bn trong mng c nhiu c

hi hn truy nhp vo cc ti nguyn ca h thng. i vi ngn

hng c c th ln l do nhiu mng LAN ca trung tm, chi nhnh

kt ni vo, do nu ngi s dng trong mng c mun truy cp

vo nhng ti nguyn ca h thng th h s gy nn mt mi e do

cho mng. Ngi s dng bn trong c th c gn nhng quyn

khng cn thit, c th b mt mt khu... v s l mi e do ln ivi h thng an ton mng.

- Nguy c b nghe trm, thay i thng tin truyn i trn mng cng

cng (PSTN). y l mt nguy c tim n v nh hng trc tip n

hot ng kinh doanh ca ngn hng. Hacker c th s dng cc cng

c, thit b c bit mc ni vo h thng cp truyn thng ca ngn

hng nghe trm thng tin nguy him hn hacker c th sa cha,

thay i ni dung thng tin - v d ni dung ca in chuyn tin,thanh ton... gy ra nhng tn tht, mt mt nghim trng.

T nhng nguy c tin n v bo mt nh trn th ta cn a ra gii php bo

mt hp l cho ngn hng.

3.4.4 Gii php bo mt :

Vic m bo an ninh bo mt h thng l ht sc quan trng nht l i vi

cc n v kinh doanh nh ca Ngn hng , ng thi kh nng bo v nhiu

lp tng cng tnh bo mt cc cc khu vc bn trong, ni lu gi cc

18


19/22

ngun ti nguyn mng c gi tr nht. Sau y chng ti xin a ra thit k

m hnh bo mt nhiu lp bao gm:

- Bo mt mc mng: Bo mt ng truyn - bo mt cc thng tin

lu truyn trn mng, vic ny c thc hin bng cc hng thc m

ho thng tin trn ng truyn, cc cng c xc nh tnh ton vn v

xc thc ca thng tin. Vic ny c th thc hin c bng phn

mm hay phn cng, tuy nhin vic thc hin trn phn cng (card m

ho trn router hay thit b m ho cng cm ngoi trn ng truyn)

c u im hn l gim tr ca cc gi tin, s dng bng thng trn

ng truyn hiu qu hn (nht l trn WAN).

- Bo mt lp truy cp bao gm:

+ Bo mt cho cc ng truy nhp ca ngi dng quay s

(dial-up): thng p dng cc hnh thc xc thc ngi dng,

to cc knh VPN cho cc kt ni dial-up

+ Firewall/IDS : Ti cc khu vc cung cp cc my ch truy

nhp cn b tr cc bc tng la (Firewall) km cc b d tm

tn cng (IDS) m bo ngn chn cc truy nhp tri php hay

cc dng tn cng ngay t cng vo mng, iu ny l rt cn

thit bi vic s dng cc thit b h tr cho cc kt ni truy

nhp ng thi li c kt ni i Internet.

- Bo mt mc thit b: Cc thit b mng nh Router v switch,

firewall l cc im nt ca mng ht sc quan trng v cn c

bo v, chng ti khuyn ngh s dng cc ACL iu khin truy

nhp trn ton b cc thit b ny, ng thi s dng cc thit b d

tm l hng (IDS) d tm xc nh cc du hiu tn cng vo cc

19


20/22

thit b mng v cc ngun ti nguyn khc v c cc bin php ngn

chn kp thi

- Bo mt mc my ch: H thng my ch thc hin cc cng vic

dch v khc nhau trong mng, c th ni y l ngun ti nguyn

chnh ht sc quan trng v l mc tiu ca nhiu cuc tn cng t

bn trong cng nh bn ngoi cng nh n cp hay ph hu cc thng

tin c gi tr c cha trong cc my ch ny. Vic bo mt h thng

my ch lin quan ti cc cng vic nh:

+ Bo mt thng tin trn my ch : m bo tnh m ho, tnh

ton vn v xc thc ca thng tin

+ Qun tr truy nhp vo my ch: p dng cc cng ngh tin

tin nh smart card, Token

+ Chng truy nhp tri php: s dng cc b d tm IDS pht

hin v bo ng kp thi khi c tn cng hay truy nhp tri

php vo h thng my ch.

- Bo mt mc H iu Hnh(HH): Vic bo mt cho HH my

ch m bo cho h thng lm vic n nh,vic hoch nh xy dng

cc chnh sch ci t, cp nht, backup d liu hay s dng cc phn

mm b sung (Patch) bt l hng trn cc HH l ht sc cn thit

m bo cho cc HH v cc ng dng chy trn n c bo v an

ninh ngn chn cc cuc tn cng c th xy ra.

- Bo mt mc ng dng: m bo vic truy nhp vo cc dch v

v phn mm (WEB, Email, CSDL), chng ti khuyn ngh thc hin

cc knh bo mt t ngi dng u cui ti cc my ch ng dng

m bo cc tnh bo mt, ton vn v xc thc ca thng tin.

20


21/22

- Bo mt mc CSDL: C th ni CSDL l li ca ton b h thngbo mt thng tin, ton b thng tin quan trng mang tnh cht sngcn c tp trung trn cc CSDL, trong thit k ca chng ti CSDLc t mc u tin cao nht.

3.4.2 An ton khi xy ra s cS c y c hai loi :

- S c v c s h tng mng

- S c v an ton thng tin

Vic duy tr mng trong ngn hng l iu ht sc quan trng bi vhot ng ca ngn hng lun gn lin vi h thng mng. Chng hnkhi xy ra s c mt kt ni ra internet trong mt khong thi gian thcoi nh ngn hng cng b t lit trong khong thi gian v thit hi

l khng th lng trc c. Do khi thit k h thng mng chongn hng ta phi m bo h thng mng hot ng n nh t xy ras c v c s h tng mng, v khi xy ra s c v h tng mng th

phi khc phc c trong thi gian nhanh nht c th.

- Vi ng kt ni ra internet : ta thu c hai ng leased-line1,2Mbps v ng ADSL 8Mbps, ng kt ni chnh l ngleased-line v s dng c ch load-balancing nhm chia ti cang leased-line qua ng ADSL khi ng leased-line bqu ti hay gp s c.

- Vi cc thit b kt ni ra internet : phi c c ch d phng, lcbnh thng th mi kt ni din ra theo ng chnh, khi mtthit b trong ng kt ni chnh gp s c (chng hn nhrouter) th lp tc phi chuyn sang ng d phng, c chny c th thc hin c bng cch set thng s priority chothit b, thit b no c priority ln hn s l thit b cho ngchnh v khi thit b trong ng chnh b s c th lp tc hthng s s dng thit b ca ng d phng m bo cho ktni c thng sut.

- Vi min DMZ, cn c backup server cho cc serverweb,mail,database v phi backup thng xuyn khi xyra s c d liu trn cc server th s ta s khng b mt d lium bo cho h thng mng hot ng bnh thng.

- Vi phn h mng ni b, vic s dng cc switch c c chspanning-tree gip chng ta to ra cc ng kt ni d phng

21


22/22

m khng b loop, nhm m bo khi switch chnh b s c thswitch d phng s hot ng v khng lm cho hot ng cangn hng b gin on.

- T chc mt phng k thut chuyn v h thng mng gii

quyt cc vn khi h thng mng xy ra s c.

3.4.3 Nng cp h thng

H thng mng c xy dng phi m bo cho vic nng cp

d dng khi cn thit, chng hn nh ngn hng tng thm nhn s, s

lng chi nhnh cng nh i tc tng ln, cc server c truy cp

nhiu hnDo trong thit k ta cng tnh n cc vn ny.

Hin ti s nhn vin l khong 600 ngi gi s c chia u trn 8

tng th mi tng c 75 ngi, ta b tr mi tng 4 switch 24 port tc

l c th p ng cho mi tng l 96 ngi, v vy khi c thm nhn

vin th ta cng khng cn phi thit k li hay mua thm switch. i

vi vn bng thng ta cng tnh n h s an ton l 20% nhm

m bo h thng hot ng n nh v khi c nhu cu tng bng

thng th ch cn ng k thay i gi cc vi nh cung cp dch

v(ISP). Vic s dng cc thit b mng ca Cisco cng ty hng u

v thit b mng gip cho ta c h tr k thut tt hn, thit b nnh hn, v nht l trong cc sn phm ca Cisco thng c tch

hp sn cc cng ngh mi, ph hp vi yu cu s dng

22

mang ngan hang

Documents