主动安全网络架构与等保要求  

Active Safety Network Architecture and Baseline for Classified Protection of Cybersecurity

作　　者：刘建兵 王振欣 杨华[1] 马旭艳 Liu Jianbing;Wang Zhenxin;Yang Hua;Ma Xuyan(Beijing VRV Software Co.,Ltd.,Beijing 100195;Bureau of Geophysical Prospecting Inc.,China National Petroleum Corporation,Baoding,Hebei 072750)

机构地区：[1]北京北信源软件股份有限公司,北京100195 [2]中国石油东方地球物理勘探有限责任公司,河北保定072750

出　　处：《信息安全研究》2022年第1期28-34,共7页Journal of Information Security Research

摘　　要：这是主动安全网络架构系列文章的第6篇.网络安全等级保护2.0(等保2.0)提出安全管理中心、安全通信网络、安全区域边界、安全计算环境的“一个中心、三重防护”的纵深安全防护体系,提出了全新的网络安全维度,进一步突出了边界管理和集中管控的重要性.主动安全网络架构可对等保2.0的技术、管理和扩展要求进行支撑,并突出了等级保护2.0的安全管理中心、安全区域边界等新维度的创新性技术实现,使得等保2.0的落地有了技术保障.主动安全网络架构在满足等保要求的同时,使得网络内生安全能力,可主动动态防御,改变了网络安全防护思路和模式,显著提高网络安全防护的效率和效果.This is the sixth article in a series of articles on active safety network architecture.Classified Protection of Cybersecurity 2.0 proposes a“one center,triple protection”in-depth security protection system of security management center,secure communication network,secure area boundary,and secure computing environment,and proposes a new dimension of network security,further highlighting the importance of boundary management and centralized management and control.The active safety network architecture can support the technical,management and expansion requirements of Classified Protection of Cybersecurity 2.0.It also highlights the realization of innovative technologies in new dimensions such as the safety management center and the boundary of the safe area,enabling technical support for the implementation.The active security network architecture not only meets the requirements for security protection,but also enables the inherent security capabilities of the network to be actively and dynamically defended,which changes the thinking and mode of network security protection,and can significantly improve the efficiency and effectiveness of network security protection.

关 键 词：安全管理中心 安全区域边界 安全策略 认证准入 密码技术 

分 类 号：TP393.1[自动化与计算机技术—计算机应用技术] TP393.2[自动化与计算机技术—计算机科学与技术]