美国关键信息基础设施网络安全改进框架及实施研究  

American Framework for Improving Critical Infrastructure Cybersecurity and Implementation Research

作　　者：陈红松[1] 黄海峰 李蔚欣 CHEN Hongsong;HUANG Haifeng;LI Weixin(University of Science and Technology Beijing,Beijing 100083,China;Taiji Computer Co.,Ltd.,Beijing 100102,China;Beijing University of Posts and Telecommunications,Beijing 100876,China)

机构地区：[1]北京科技大学,北京100083 [2]太极计算机股份有限公司,北京100102 [3]北京邮电大学,北京100876

出　　处：《信息安全与通信保密》2021年第5期59-68,共10页Information Security and Communications Privacy

基　　金：国家社会科学基金一般项目(No.18BGJ071)

摘　　要：为了提高我国关键信息基础设施网络安全保护水平,以美国相关标准规范为对象,研究了美国《关键基础设施网络安全改进框架》的组织结构和实际应用,以美国《能源行业网络安全框架实施指南》为例阐述了关键信息基础设施网络安全改进框架在美国能源行业的实施步骤及方法。从目标、实施、映射三个方面对美国关键信息基础设施保护规范进行了综合分析。针对我国关键信息基础设施保护现状,结合美国关键信息基础设施保护经验提出5点启示建议。In order to improve the protection level of Chinese critical information infrastructure,American related standards and specifications are treated as research object,the structure and application of the Framework for Improving Critical Infrastructure Cybersecurity are researched.The U.S.Energy Sector Cybersecurity Framework Implementation Guidance is analyzed,the critical infrastructure cybersecurity implementation method in American energy industry is elaborated.A comprehensive analysis of the critical information infrastructure protection standards in the U.S.is given from three aspects:goal,implementation and mapping.According to the current situation of Chinese critical information infrastructure protection,combined with American critical information infrastructure protection experience,five enlightenment suggestions are proposed.

关 键 词：关键信息基础设施 网络空间安全 实施方法 启示建议 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]