基于基线理论的信息安全监管平台的设计  

Design of Information Security Supervision and Control Platform based on Baseline Theory

作　　者：严玉婷[1] 戴明[2] 成瑾[1] 

机构地区：[1]信息安全共性技术国家工程研究中心,北京100080 [2]中国交通通信信息中心,北京100111

出　　处：《信息安全与通信保密》2012年第8期90-92,共3页Information Security and Communications Privacy

摘　　要：随着信息化发展,通过采集设备日志定位已发生安全事件的安全防御模式已经很难适应当前信息化发展水平。采用基线理论设计的信息安全监管平台通过综合管控措施,实现信息安全主动防御,能有效提高政府及企事业单位信息安全监控能力,满足国家、行业层面信息安全合规性要求。文中从需求分析、平台目标、功能模块设计等方面阐述了信息安全监管平台的总体设计,通过对该平台的应用,可以极大限度地提高信息安全的可控性及可管理性。With the development of informationization, the security and defense mode through collecting the logs of machines and then locating the problems, is hard to adapt the new informationization level. The information security monitoring platform based on baseline theory could, through integrated management and control, effectively improve the ability of government and enterprises in supervising the information security events, and thus meet the specified requirement of information security system for the state and enterprises. This paper describes the overall design of information security supervision and control platform based on the security baseline theory from the aspects of demand analysis, platform objective, functions design, etc. The application of this platform could greatly improve the controllability and manageability of information security.

关 键 词：安全基线 信息安全监管 等级保护 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]