浅谈等保建设安全防护框架  

Discussion on Security Protection Framework of Classified Protection Construction

作　　者：何新华[1] 春增军[1] 赵志中[1] 

机构地区：[1]中科华核电技术研究院有限公司信息技术中心,广东深圳518028

出　　处：《通信技术》2011年第12期98-100,103,共4页Communications Technology

摘　　要：以信息系统安全等级保护基本要求为基础,以信息系统等级保护安全设计技术要求为指导,按照分区、分域、分级的防护方针,结合安全管理中心、区域边界安全防护、本地计算环境防护、通信网络安全防护和相关技术手段与功能要求,设计出信息系统安全防护框架体系。并提出了信息系统安全等级保护的整体安全防护策略,以及不同信息系统间共用资源的安全防护策略。供各行各业在开展信息系统安全等级保护规划设计与实施建设时参考。Based on basic requirement of information system classified protection, and with the guidance of information system classified protection security design technical requirement, the information system security protection framework system is designed according to the subarea, sub-region and classification protection policy, in combination with the security management centre, regional border security protection, the local computing environment protection, communication network security protection and relevant technical means and function requirements. Meanwhile, the overall security protection strategy for information system security protection is proposed, including and the security protection policy for the shared resources of between the different information systems. This could serve as a reference for various industries in the information system classified protection design and implementation.

关 键 词：等级保护 分区 分域 分级 安全管理中心 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]