基于等保2.0标准的Linux安全加固技术研究  

Research on Linux Security Reinforcement Technology Based on Classified Protection 2.0 Standard

作　　者：黄海军 黄东生 HUANG Hai-jun;HUANG Dong-sheng(Huadian Yunnan Power Generation Co.,Ltd.,Kunming 650228,China;Guangxi Baise Yinhai Power Generation Co.,Ltd.,Baise 533615,China)

机构地区：[1]华电云南发电有限公司,云南昆明650228 [2]广西百色银海发电有限责任公司,广西百色533615

出　　处：《云南水力发电》2022年第1期188-194,共7页Yunnan Water Power

摘　　要：在等保2.0标准下,以“建立、健全安全的计算机环境”为最终目标,针对网络攻击的特点,深入挖掘Linux系统内核参数、底层模块、核心应用的高级功能,对网络、密码、权限、SSH、日志等保护对象提出了一系列的加固措施,通过构造网络长城、科学分离权限、加固SSH安全通道、封堵系统管理漏洞、增加风险行为审计等做法,实现了满足等保2.0标准的主机加固目标,能充分保障计算机的环境安全。Under the standard of Cybersecurity 2.0,this paper takes“establishing and perfecting a secure computer environment”as the ultimate goal,and deeply excavates the high-level functions of Linux system core parameters,bottom modules and core applications according to the characteristics of network attacks.At the same time,a series of reinforcement measures are put forward to protect objects such as network,password,authority,SSH and log.By constructing the Great Wall of Network,scientifically separating authority,strengthening SSH security channel,blocking system management loopholes,increasing risk behavior audit and other practices,the goal of host reinforcement meeting the iso-guarantee 2.0 standard has been achieved,which can fully guarantee the environmental safety of computer.

关 键 词：网络安全 主机加固 工控系统 电力监控系统 态势感知 可插入的认证模块 SELINUX 

分 类 号：TP309.1[自动化与计算机技术—计算机系统结构]