Abstract: The graded defense mechanism of network and information system is the key point of our national informatization procedure. It is put forward a graded security defense model for the large-scale network on the basic of discussing general graded security measures in this thesis. The model has been used in an actual testing network and already obtains a good effect.