业务系统安全基线的研究及应用  

Study and Applications of Operation System Security Baseline

作　　者：桂永宏 

机构地区：[1]中国移动通信集团广西有限公司,广西南宁530022

出　　处：《计算机安全》2011年第10期23-27,共5页Network & Computer Security

摘　　要：安全基线是一个业务系统的最小安全保证,即该业务系统最基本需要满足的安全要求。在运营商领域,安全基线的应用范围非常广泛,主要包括新业务系统的上线安全检查、第三方入网安全检查、合规性安全检查(上级检查)、日常运维检查/评估等。通过对目标系统展开合规安全检查,找出不符合的项目并选择和实施安全措施来控制安全风险,并通过对历史数据的分析获得业务系统安全状态和变化趋势。Security baseline is a business system which guarantees minimum security for a business system and provides the most basic needs to meet safety requirements.In the operators field,the security baseline application range is very wide,it mainly includes new business systems of on-line safety inspection,the third party access to the net safety checks,compliance safety inspection（superior inspection）,daily operation and maintenance inspection or assessment etc.Through the target system is launched the compliance safety inspection,finding out the incongruent items to select and implement safety measures to control the security risk,and through the analysis of the historical data to obtain the business system safety status and trends.

关 键 词：SCAP安全基线 安全合规检查 入网安全检查日常运维安全评估 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]