政务网站流量安全基线分析研究  

Research on Web Traffic Security Baseline Analysis of Government Website

作　　者：蔡国庆 刘鹏[1] 李憧 Cai Guoqing;Liu Peng;Li Chong(Beijing Government Computer Emergency Response Center,Beijing100101)

机构地区：[1]北京市政务信息安全应急处置中心,北京100101

出　　处：《信息安全研究》2020年第6期537-542,共6页Journal of Information Security Research

摘　　要：随着政务云平台的建设和政务监测范围的不断扩展,采集的数据类型和数量大幅增加,如何有效地从海量数据中提取有价值的信息是重中之重.分析了政务网站监测中存在的问题,提出了网站流量数据分类方法,并基于网站流量基线分析进行网络监测预警体系建设,可以提升安全监测和运维服务体系能力,及时发现流量中存在的异常情况,提高威胁分析能力,确保监测预警的持续、有效运行.With the construction of the government cloud platform and the continuous expansion of the scope of government monitoring,the type and quantity of data collected has increased significantly.How to extract valuable information from the massive data effectively is the most important.This paper analyzes the problems existing in the monitoring of government websites,puts forward the classification method of website traffic data,and builds the network monitoring and early warning system based on the analysis of website traffic baseline.The web traffic baseline will improve the ability of security monitoring and operation and maintenance service system,discover the abnormal situation in the website traffic in time,improve the ability of threat analysis,and ensure the continuous and effective operation of monitoring and warning.

关 键 词：监测预警 网络安全 基线分析 流量分析 政务网站 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]