信息化的安全保障,总体上讲就是要解决“网络环境安全”的问题和“网络应用安全”的问题。网络环境安全主要是防止来自外网的恶意攻击、防止涉密信息被窃取、信息的加密传输、防病毒和容灾备份等；应用安全主要解决信息化应用中的非法操作、越权访问等安全问题。 Information security, in general, is to solve the “network environment security” and “network application security” issue. Network environment security is mainly to prevent malicious attacks from outside the network to prevent the theft of confidential information, the encrypted transmission of information, anti-virus and disaster recovery backup; application security mainly to solve the illegal use of information technology operations, unauthorized access and other security issues .