一种有效防范APT攻击的网络安全架构  

A Hierarchical-centralized Network Security Architecture Effectively Preventing APT Attacks

作　　者：许婷[1] 

机构地区：[1]中国人民银行南京分行,江苏南京210004

出　　处：《信息安全与通信保密》2013年第6期65-67,共3页Information Security and Communications Privacy

摘　　要：近年来,高级持续性威胁(APT,Advanced Persistent Threat)已经成为一种严重威胁企业数据安全的网络攻击。这种网络攻击具有针对性、隐蔽性、持续性和可变性特点,目的直达企业核心数据。传统基于"网关+服务器+PC终端"的三层安全防护架构过于分散,无法有效地发现和阻止此类攻击。文中提出了一种改进的分层集中式网络安全架构,通过集中分析和管控的方法,使企业内部的安全防护部件构成一个有机整体,能够有效地防范APT网络攻击。In recent years, advanced persistent threat（APT） has become a serious threat to enterprise data security. This type of attack is of purposiveness, concealment, sustainability, variability and other characteristics, and focuses on core data of the enterprise.The traditional ＂gateway ＋ server ＋ PC terminal＂ based three-tier security architecture is unduly distributed and thus could not find and prevent such kind of attack. An improved hierarchical-centralized network security architecture is propsed, which, through centralized analysis and control method, makes the internal security components an organic entirety and thus effectively prevent APT network attack.

关 键 词：高级持续性威胁 网络安全 分层集中 架构 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]