应急管理网络信息体系中的内生安全机制设计  

Design of Internal Security Mechanism in Emergency Management Network Information System

作　　者：秦智超[1] 岳兆娟[2] 田辉[1] QIN Zhi-chao;YUE Zhao-juan;TIAN Hui(China Academy of Electronics and Information Technology,Beijing 100041,China;Computer Network Information Center,Chinese Academy of Sciences,Beijing 100190,China)

机构地区：[1]中国电子科学研究院,北京100041 [2]中国科学院计算机网络信息中心,北京100864

出　　处：《中国电子科学研究院学报》2019年第12期1233-1241,共9页Journal of China Academy of Electronics and Information Technology

基　　金：国家自然科学基金。

摘　　要：应急管理网络信息体系是实现防灾减灾救灾能力提升的重要支撑,在构建大国应急管理能力的过程中发挥着关键作用。由于融合应急指挥网、无线通信网、卫星通信网、互联网等多种异构网系,网络环境开放,工作模式服务多样,该体系在安全方面面临着巨大挑战。本文从内生安全的理念设计了应急管理网络信息体系的安全架构,在域间安全隔离、可信身份认证、安全态势感知、网元动态赋能、虚拟攻防演练、安全运维管理等方面系统阐述了其实现机理,以期形成增长式、体系化的安全防护能力。As an important support to enhance the ability of disaster prevention,mitigation and relief,Emergency management network information system plays a key role in the process of building the emergency management capacity of large countries.Because of the integration of emergency command network,wireless network,satellite network,Internet and other heterogeneous network systems,plus open network environment and diverse service mode,the system is facing tremendous security challenges.Secu・rity architecture of emergency management network information system is designed from the concept of endogenous security,and systematically expounds its implementation mechanism in the aspects of inter-domain security isolation,trusted identity authentication,situational awareness,security empowerment,security operation and maintenance,in order to form an increasing and systematic security protection capability.

关 键 词：应急管理 异构网络 内生安全 动态赋能 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]