移动接入解决方案持续监测机制研究  

Continuous Monitoring Mechanism of Mobile Access Solution

作　　者：郭庆[1] 余海[1] 房利国[1] GUO Qing;YU Hai;FANG Li-guo(No.30 Institute of CETC,Chengdu Sichuan 610041,China)

机构地区：[1]中国电子科技集团公司第三十研究所,四川成都610041

出　　处：《通信技术》2020年第3期711-717,共7页Communications Technology

摘　　要：针对处理机密信息的终端用户设备通过移动通信网安全接入相同保密等级的政府机构内部网络或政府合作企业内部网络的问题,美国国家安全局基于商用密码产品和安全产品给出了双层加密和持续监测的移动接入整体解决方案。解决方案提出了持续监测框架、监测点位置、监测数据收集方法,以及监测点选择、告警触发条件等实施要求。对各监测点网络流量特征、安全事件数据汇集手段、系统动态安全模型的分析,可为基于移动通信网等开放网络的虚拟私有专网整体监测方案设计提供参考。For the end-user devices that handle confidential information securely access an internal network of government agencies or government co-operatives at the same level of secrecy via the mobile communication network,the NSA gives the mobile access overall solution for double-layer encryption and continuous monitoring based on commercial crypto products and security products.The solution proposes implementation requirements for continuous monitoring framework,monitoring-point location,monitoring data collection methods,monitoring-point selection,and alarm trigger conditions.Analysis on the network traffic characteristics,security event data collection means,and system dynamic security model of each monitoring point can provide reference for the design of overall monitoring scheme of virtual private networks based on open networks such as mobile communication networks.

关 键 词：持续监测 CSfC MA CP CDS SIEM P2DR2 

分 类 号：TN918[电子电信—通信与信息系统]