基于零信任的石油网络安全架构研究  

作　　者：丁锐 

机构地区：[1]昆仑数智科技有限责任公司,北京100026

出　　处：《科技创新与应用》2022年第16期81-84,共4页Technology Innovation and Application

摘　　要：石油信息系统的网络安全关乎国家关键基础设施安全和人民群众财产安全。信息化的发展对石油系统网络安全能力提出更高的要求,为实现其石油信息系统按最小访问控制权限原则的动态授予所有访问实体权限,提出零信任访问控制模型,实现对用户的动态信任评估和访问行为的持续安全验证。基于此访问控制模型,构建零信任石油信息网络安全架构,并讨论石油网络安全架构中核心组件和关键技术。The network security of petroleum information system is related to the security of national key infrastructure and the security of people's property.The development of informatization puts posed higher requirements for the network security capability of the petroleum information system.In order to realize the dynamic authorization of all access entities by the petroleum information system according to the principle of minimum authority of access control,a zero trust access control model is proposed to realize the dynamic trust evaluation of users and the continuous security verification of access behavior.Based on this access control model,the zero-trust petroleum information system security architecture is constructed,and the core components and key technologies of the petroleum information system security architecture are discussed.

关 键 词：访问控制 零信任 石油信息系统 网络安全架构 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]