网络配置及核查系统的设计与开发  

Design and Development of Network Configuration and Verification System

作　　者：程立雪[1] 陈志文[1] CHENG Li-xue;CHEN Zhi-wen(Institute of Computer Application,China Academy of Engineering Physics,Mianyang 621900,China)

机构地区：[1]中国工程物理研究院计算机应用研究所,四川绵阳621900

出　　处：《电脑与信息技术》2023年第1期58-60,85,共4页Computer and Information Technology

摘　　要：网络配置及核查系统以构建数字网络模型为核心,一方面,通过基线核查的方式,实现了变更审计、安全风险评估、性能缺陷识别等功能;通过逻辑运算实现了安全策略冗余与冲突识别、合规矩阵与合规依据的检测。另一方面,支持第三方系统调用的应用接口,根据传递的用户需求自动生成部分网络安全访问策略的配置并监控执行,防止人工操作的漏洞。自动化的配置及核查为标准合规的运维管理、安全可靠的网络服务提供了支撑。The network configuration and verification system takes the construction of digital network model as the core. On the one hand, through baseline verification, it realizes the functions of change audit, security risk assessment, performance defect identification and so on;The redundancy and conflict identification of security policy and the detection of compliance matrix and compliance basis are realized through logical operation. On the other hand, the application interface that supports the thirdparty system call automatically generates the configuration of some network security access policies according to the transmitted user requirements and monitors the implementation to prevent the vulnerability of manual operation. Automatic configuration and verification provide support for standard compliant operation and maintenance management and safe and reliable network services.

关 键 词：配置核查 安全基线 合规检测 自动化配置 

分 类 号：TP311.52[自动化与计算机技术—计算机软件与理论]