地理信息大数据安全保障模型和标准体系  

Security Assurance Model and Standardization Framework of Geographic Information Big Data

作　　者：叶润国[1] 吴迪[2] 韩晓露 YE Run-guo;WU Di;HAN Xiao-lu(China Electronics Standardization Institute, Beijing 100007, P.R.China;China Information Security Certification Center, Beijing 100020, P.R. China;School of Electronics and Information Engineering, Beijing Jiaotong University, Beijing 100045, P.R.China)

机构地区：[1]中国电子技术标准化研究院,北京100007 [2]中国信息安全认证中心,北京100020 [3]北京交通大学电子信息工程学院,北京100045

出　　处：《科学技术与工程》2017年第36期105-111,共7页Science Technology and Engineering

基　　金：国家智能制造专项(京财经一指[2015]1170号);工信部工控安全评估专项(工信软函[2015]366号);工信部电子发展基金(工信部财[2014]425号)资助

摘　　要：地理信息数据是一种基础性和战略性资源,多源海量的地理信息数据借助大数据分析技术可以挖掘出巨大价值。但地理信息大数据面临多种安全威胁,可能威胁我国的国家安全和社会稳定。现有针对地理信息大数据的安全保护研究多关注安全技术,缺乏地理信息大数据安全管理和安全保障的研究,一个完整的地理信息大数据安全保障方案应该是安全技术和安全管理并重。在分析了地理信息大数据面临的各种安全威胁后,提出了一个地理信息大数据安全保障框架,从安全管理保障、技术保障、工程保障和组织保障4个方面来实施地理信息大数据安全保障工作,该安全保障框架可以指导地理信息大数据应用建设者和运营者提升地理信息大数据系统建设和运营过程中的安全保障能力。同时,为落实地理信息大数据安全保障框架,提出了一个配套的地理信息大数据安全标准框架,旨在以安全标准为抓手,切实推动中国地理信息大数据安全保障工作,为中国地理信息产业的健康发展打好坚实基础。The geographic information data are fundamental and strategic resources.The geographic information data,with variety and huge as their characteristics,can create huge value with the leverage of big data techniques,but geographic information big data are exposed to various security threats,that can threaten national security and social stability.Current research on security of geographic information big data is mainly concentrated on security techniques,lacking of focus on security management and assurance.A systematic geographic information big data security assurance model is necessary that treasure both security techniques and management at the same time.An analytic study on various security threats exposed to geographic information big data is conducted,and a security assurance model of geographic information big data is given,constructing the security assurance solution from the security management,security techniques,system engineering and organizational assurance viewpoint,for the purpose of improving security assurance capability of building and running geographic information big data.At last,a security standardization framework of geographic information big data is proposed,as a breaking point to promote geographic inform big data security assurance work and lay a solid foundation for the healthy development of Chinas geographic information industry.

关 键 词：地理信息数据 安全保障 安全保障框架 大数据 大数据安全 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]