防范高级持续性威胁的军事信息系统安全框架研究  

A study on security framework of military information systems guarding against advanced persistent threats

作　　者：吴晓平[1] 付钰[1] 李洪成[1] 

机构地区：[1]海军工程大学信息安全系,武汉430033

出　　处：《海军工程大学学报（综合版）》2016年第2期30-35,共6页Journal of Naval University of Engineering(Comprehensive Edition)

基　　金：国家社会科学基金军事学资助项目(15GJ003-201);海军工程大学社会科学基金重点资助项目(HGDSK2015E07)

摘　　要：针对传统军事信息系统安全防护技术难以有效应对高级持续性威胁(Advanced Persistent Threats,APT)的问题,结合军事信息系统的特点,分析了针对军事信息系统的APT攻击过程,进而构建了包含系统安全检测、系统安全防护和主动防御三部分的军事信息系统防范APT攻击安全框架,并重点对系统安全检测中的集成入侵检测系统和大数据深度关联分析系统进行了设计。该框架可以为抗APT攻击的军事信息系统安全防御体系建设提供借鉴和依据。Since the traditional security framework of military information systems cannot deal with advanced persistent threats efficiently, the characteristics of APT attacks aiming at military informa- tion systems are analyzed systematically according to the features of military information systems. Then a security framework of military information systems including the sections of security detec- tion, security protection and subjective defense is established to guard against APT a,ttacks. Moreo- ver, the particular design of integrated incursion detecting system and big data deeply correlating sys- tem is proposed. The framework proposed in this paper will provide reference for building a security defending system aiming at combating APT attacks in military information systems.

关 键 词：军事信息系统 高级持续性威胁 系统安全防御框架 

分 类 号：TP309.7[自动化与计算机技术—计算机系统结构]