中国极地科学数据库系统硬件平台建设和系统安全策略

中国极地科学数据库系统是一个物理上分布、逻辑上集中、开放式多数据库集成的系统。依据系统功能需求,系统主要由系统管理模块、数据输入模块和网页发布功能模块组成。系统的特色在于建立了元数据和数据集系统。极地数据库系统的数据库服务器硬件环境是Xseries345,操作系统采用的是Unixware7.1.1(双CPU+磁盘阵列,磁盘阵列系统作RAID5冗余),数据库管理系统使用Oracle8i for Unixware。Web服务器的硬件环境是IBM Netfinity7100(双CPU),操作系统使用的是Windows2003Server,服务器软件为IIS6.0+Net Framwork1.1。目前已经建成“极区海洋学”,“日地物理学”两个子数据库,共涵盖2143个数据集,容量80G的数据在网上提供查询、下载服务。考虑到极地科学数据库现在的数据量有限,数据更新周期较长,更新量较大的特点,目前选用价格低、扩展能力强、成熟可靠的磁带备份技术。采用的备份策略是全量备份。随着技术发展和用户需求,将来应考虑采用新的备份技术,实现备份的自动化,同时加强局域网内部的安全管理。

SYSTEM CONSTRUCTION AND SYSTEM SECURITY ON CHINESE POLAR DATABASE SYSYTEM

Chinese polar science database system is an open multi-database integration system with physical distribution and logical collection. Based on the system functions, it includes system management module, data input module and webs release module. Its characteristic lies in the construction of metadata and data set system. The database server system is built on UNIX platform, with hardware virus defense, preventing outside attacks, and with the backup strategy of copying all data completely. The security questions of web server include illegal visiting and virus prevention. As for system security strategy, it is proposed to track the development trend of backup technology, and to replace cassette backup with disk backup, copying all data automatically. In addition, the management of internal web, monitoring the internet state should be strengthened, in order to safeguard the data from internal web.