面向智能终端应用全生命周期安全的风险管控体系  

Risk Management and Control System for Intelligent Terminal Application Security

作　　者：王海峻 张鸷 WANG Hai-jun;ZHANG Zhi(China Mobile Group Liaoning Co.,Ltd.,Shenyang 110179,China)

机构地区：[1]中国移动通信集团辽宁有限公司,沈阳110179

出　　处：《价值工程》2022年第33期43-47,共5页Value Engineering

摘　　要：为提升自有业务智能终端应用安全管理水平,降低业务安全风险,构建面向智能终端应用安全的风险管控体系。建立包括报备管理-安全检测-整改加固-动态监测等4大模块的管控工作架构。依托AI检测引擎,运用多维多态的风险分析模型、多因子篡改识别算法,并结合个人信息保护专项合规检测实现终端应用安全全生命周期安全管理。管控体系运行以来,年均检测自有业务应用300余件次,自主发现风险225项。没有出现上级单位监测通报的APP安全风险。为助力公司业务高质量发展,切实保护客户权益作出了积极贡献。In order to improve the security management level of autonomous service intelligent terminal applications,reduce business security risks,the risk management and control system oriented to the security of intelligent terminal applications established.The management framework includes four modules:reporting management,security detection,rectification and reinforcement,and dynamic monitoring.Relying on multi-dimensional polymorphic risk analysis model,multi factor tamper identification algorithm,and combining with special compliance detection of personal information protection,the terminal application security lifecycle security management is realized.Till now more than 300 autonomous service applications have been tested every year,and 225 risks have been found.There are no APP security risks reported by superior units.It has made positive contributions to the high-quality development of the company's business,also well protected customers'rights and privacy.

关 键 词：智能终端应用 AI检测引擎 篡改识别算法 个人信息保护 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]