业务弱隔离环境下的数据安全攻防技术研究  

Research on data security attack and defense technology under weak business isolation environment

作　　者：王衡 刘圣龙 赵涛 王迪 WANG Heng;LIU Sheng-long;ZHAO Tao;WANG Di(State Grid Big Data Center,Beijing 100052,China)

机构地区：[1]国家电网有限公司大数据中心,北京100052

出　　处：《信息技术》2021年第4期113-118,124,共7页Information Technology

摘　　要：针对当前企业数据网络安全和管理存在业务隔离环境差、防御措施老套等问题,文中设计了一套实用的安全系统解决方案。该方案采用程序分析法、补丁对比法和模糊测试技术相结合,研究出基于NFC应用安全漏洞挖掘系统,通过URL监测系统和Android恶意监测系统双层保障,配合攻防技术对漏洞进行监测处理。实验结果表明,该方案简单方便且安全可靠,比SCADet系统的漏检率还要低,是较为实用的技术方案。In view of the problems of the current enterprise data network security and management,such as poor business isolation environment and old-fashioned defense measures,this paper designs a set of practical security system solutions.This scheme uses program analysis method,patch comparison method and fuzzy test technology to study the application security vulnerability mining system based on NFC,which is protected by URL monitoring system and Android malicious monitoring system,and monitors and handles vulnerabilities with function prevention technology.The experimental results show that the scheme is simple,convenient,safe and reliable,and has a lower rate of missed detection than SCADet system.It is a very practical technical scheme.

关 键 词：业务弱隔离 NFC应用 漏洞挖掘 攻防技术 URL标签 

分 类 号：TM74[电气工程—电力系统及自动化] TP39[自动化与计算机技术—计算机应用技术]