政府部门邮件系统安全现状研究  

Security Situation of the Email System for Chinese Government Sectors

作　　者：樊华[1] 甘杰夫[1] 寇春晓[1] 李澄清[2] 

机构地区：[1]中国信息安全认证中心,北京100020 [2]湘潭大学信息工程学院,湖南湘潭411105

出　　处：《信息安全与通信保密》2016年第9期55-58,62,共5页Information Security and Communications Privacy

基　　金：湖南省杰出青年基金项目(No.2015JJ1013)

摘　　要：为了解我国政府部门邮件系统的安全现状,我们对其使用的典型邮件系统进行了调研。通过登录其官网,利用数据抓包、协议解析、密码分析等技术手段,对其系统入口、登录、传输、端口开放以及加密强度等安全特性进行了统计和分析。根据调研结果,提出了邮件系统安全使用规范原则建议。这些建议为避免人为泄露信息,确保电子邮件办公系统的安全性和机密性提供参考。根据技术发展趋势,提出了进一步深入研究本课题的方向。To know the security situation of email systems for Chinese government departments, the typical email systems in use by theses departments are investigated and their security characteristics in system entrance, login method, transport mode, port opening, and encryption strength also analyzed. Based on the investigation resuhs, some practical suggestions for secure use of email system are proposed, and these suggestions may serve as a reference fur avoiding artificially-imposed information leakage and ensuring security and confidentiality of the email-based office system. This paper also proposes the direction fi,r further re- search according to the trend of technology development.

关 键 词：邮件系统 信息安全 APT攻击 鱼叉式钓鱼 

分 类 号：TP393.098[自动化与计算机技术—计算机应用技术]