密码安全态势感知系统架构与应用研究  

Research on Architecture and Application of Cryptography Security Situation Awareness System

作　　者：褚思怡 周长春[1] 阎亚龙 CHU Siyi;ZHOU Changchun;YAN Yalong(Beijing Electronic Science and Technology Institute,Beijing 100070,China;University of Science and Technology of China,Hefei Anhui 230026,China)

机构地区：[1]北京电子科技学院,北京100070 [2]中国科学技术大学,安徽合肥230026

出　　处：《信息安全与通信保密》2023年第2期95-104,共10页Information Security and Communications Privacy

摘　　要：密码安全态势感知作为一种实时、整体洞悉密码安全风险的能力,可为密码管理人员提供全面的密码安全状态信息,使其及时、准确地发现全局环境下存在的密码安全问题,从而助力密码安全的决策与治理,具有良好的发展和应用前景。通过分析商用密码领域密码安全态势感知研究所面临的问题与挑战,从保障密码整体安全的角度提出了一种体系架构和基于此架构的系统设计方案,并以建构某部委密码安全态势感知系统为例进行分析。最后,对系统的下一步实践与应用提出了建议。Cryptography security situation awareness is an ability to gain real-time and holistic insight into cryptography security risks.It can provide cryptography managers with comprehensive cryptography security status information,enabling them to timely and accurately identify cryptography security problems in the global environment,thus facilitating decision-making and governance of cryptography security,and it has good development and application prospects.By analyzing the problems and challenges faced by the researches of cryptography security situation awareness in the commercial cryptography field,from the perspective of ensuring the holistic security of cryptography,this paper proposes an architecture and a system design scheme based on this architecture,then takes the construction of a ministry's cryptography security situation awareness system as an example for analysis.Finally,some suggestions for further practice and application of the system are given.

关 键 词：密码安全 态势感知 商用密码 系统架构 密码管理 密码应用 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]