电网企业统一漏洞补丁管理系统设计与应用  

Design and Application of Unifi ed Vulnerability Patch Management System for Power Grid Enterprises

作　　者：李志茹[1] 张驯[1] 龚波[1] 崔阿军[1] 

机构地区：[1]国网甘肃省电力公司电力科学研究院,甘肃兰州730050

出　　处：《电力信息与通信技术》2016年第4期75-78,共4页Electric Power Information and Communication Technology

摘　　要：近年来,信息系统漏洞不断增多,网络攻击技术和攻击工具层出不穷,利用信息系统漏洞攻击的网络安全事故也越来越多,并且呈日趋严重的态势,网络安全形势十分严峻。统一漏洞补丁管理系统为满足电网企业集团化管理要求,解决电网企业对下级单位漏洞、补丁情况监管不足问题,减少因漏洞修补、补丁安装不及时、不全面而导致的风险,实现漏洞与补丁管理流程的规范化、程序化以及电网企业对漏洞及补丁的统一管理,满足电网企业集团化企业大范围、复杂系统信息安全漏洞与补丁管理要求。此外,统一漏洞补丁管理系统还解决了电网企业对漏洞、补丁统一监管的问题。In recent years, information system vulnerabilities, network attacking techniques and tools have been increased, which have brought network security pressure and serious network security situation. This paper proposes a unifi ed vulnerability patch management system to meet the management requirements of power grid corporation group to solve the problem of insuffi cient supervision of subordinate unit vulnerabilities and patches, reduce the risk caused by not timely, comprehensive vulnerability remediation and patch installation. Standardized and programmed management process and unifi ed management of vulnerability and patch can be achieved by this system, to meet the large-scale and complex information system security vulnerability and patch management requirements of power grid corporation group. The problems of unified supervision of vulnerability and patch can also be solved.

关 键 词：漏洞攻击 统一漏洞 补丁管理 漏洞修补 

分 类 号：TP309.2[自动化与计算机技术—计算机系统结构]