基于区块链的企业信息安全保障体系研究  

Research on Enterprise Information Security Assurance System Based on Block Chain

作　　者：钟征燕[1] Zhong Zhengyan(Information Center,China Tobacco Guangxi Industrial Co.,Ltd,Nanning 530001)

机构地区：[1]广西中烟工业有限责任公司信息中心,南宁530001

出　　处：《信息安全研究》2020年第8期727-732,共6页Journal of Information Security Research

摘　　要：随着网络攻击技术的层出不穷和高危零日漏洞、勒索病毒等安全威胁的不断挑战,信息安全防护压力与日俱增.通过研究企业主动管控、系统防护和纵深防御的需求,基于对区块链安全机制和安全策略的研究,提出基于区块链的企业信息安全保障体系框架,为企业构建技术与管理相结合、动态与静态相融合的信息安全新架构提供有益的参考.With the continuous emerging of various network attack technologies and the constant challenge of security threats such as high-risk zero-day vulnerabilities and ransomware,the pressure of information security protection is increasing day by day.By analyzing the needs of enterprises for active control,system protection and in-depth defense,and studying the security mechanism and security strategy of blockchain,this paper proposes the new framework of enterprise information security assurance system.It may provide a valuable reference for enterprises to build a brand new architecture of information security that integrates technology and management,dynamic system and static system.

关 键 词：区块链 安全机制 安全服务 安全策略 安全架构 安全体系 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]