网络设备安全基线配置核查分析系统设计与实现  

Design and Implementation of Security Baseline Configuration Verification Analysis System of Network Device

作　　者：马铮[1] 朱常波[1,2] Ma Zheng;Zhu Changbo(China Unicom Network Technology Research Institute,Beijing 100048,China;China Unicom Smart City Research Institute,Beijing 100048,China)

机构地区：[1]中国联通网络技术研究院,北京100048 [2]中国联通智能城市研究院,北京100048

出　　处：《邮电设计技术》2019年第4期6-11,共6页Designing Techniques of Posts and Telecommunications

摘　　要：随着网络规模扩展和业务深度融合,设备安全参数和策略的配置进一步复杂,容易出现错配漏配,降低了网络可靠性和稳定性,因此,亟需加强网元安全基线配置核查能力。介绍了网络设备安全基线的定义、管控对象,分析了网络设备安全基线配置核查分析系统的功能需求,设计了系统总体架构,探讨了主要功能模块的具体实现方案。With the expansion of network scale and the deep integration of services,the configuration of equipment security parameters and strategies become more and more complex,error configurations occur frequently,which would reduce the reliability and stability of the network.So it is necessary to strengthen the verification capability of network equipment security configuration.It introduces the definition and scope of network equipment security baseline configuration,analyzes the functional requirements of the security configuration verification,designs the system architecture,and discusses the implementation of main function modules.

关 键 词：安全基线 配置核查 自动检测工具 

分 类 号：TN915.08[电子电信—通信与信息系统]