政府网站安全防御要变被动为主动  

Conversion of Passive Defense to Proactive Prevention-On Government Website Security

作　　者：孙宇[1] 

机构地区：[1]环境保护部信息中心,北京100035

出　　处：《信息安全与通信保密》2011年第9期42-44,共3页Information Security and Communications Privacy

摘　　要：文中从政府网站监管机构和运营者的角度考虑,在专门针对政府网站特定业务应用的原有被动式安全防御建设基础上,提出在贯穿政府网站全生命周期的信息安全建设过程中,从安全监测、安全防护、安全恢复、安全检查和应急响应体系5个方面对政府网站的信息安全体系进行完善,将政府网站安全需求转化为更加主动的防御技术和监管手段,使政府网站具备一定的对抗能力和应急恢复能力,形成事前安全评估、事件监测,事中应急响应与恢复,事后整改加固等完整的政府网站安全管理方式。A way to perfect the security system and keep the government websites always secure is proposed from the angle of websites operators and surveillance and on the basis of existing passive defense against attacks targeting specific applications of these websites. The security concept covers the entire lifecycle of an attack,with five aspects, including security monitoring,attack prevention,attack recovery,security re-checking and emergency response system. This way converts the security requirements to proactive prevention techniques and surveillance measures,thus to enhance the website capabilities in anti-attacks,emergency responses and quick recovery and form a seamless website security management approach involving pre-event security assessment and monitoring,in-event quick response, and recovery and post-event reinforcement.

关 键 词：政府网站 网站监测 防篡改 防挂马 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]