安全资源池安全组件服务编排研究与实践分析  

Research and Practice Analysis on Service Arrangement of Security Components in Security Resource Pool

作　　者：程子栋 CHENG Zidong(State Information Center,Beijing 100045,China)

机构地区：[1]国家信息中心,北京100045

出　　处：《信息安全与通信保密》2023年第6期66-80,共15页Information Security and Communications Privacy

摘　　要：2018年以后,云计算安全技术进入实际生产高峰期,传统的安全防护逐渐由独立的组件防护转变为安全资源池防护,解决了政务网络和互联网应用传统防护组件繁杂、难管理等诸多问题。围绕软硬件混合安全组件引流编排、多安全资源池管理等创新实践,从问题需求、方案思路、测试验证等方面阐述研究成果。为政务网络和互联网应用在日常安全运维、重大活动网络安全保障、安全服务定制化等多场景、多纵深的安全防护项目提供实践参考,进一步推动形成了国家电子政务外网安全资源池标准体系。After 2018,cloud computing security technology has entered the actual production peak,and the conventional security protection is gradually changed from independent component protection to security resource pool protection,which solves many problems such as the complexity and difficulty of managing conventional protection components in government networks and Internet applications.This paper focuses on the innovative practices of software and hardware hybrid security component drainage arrangement and multi security resource pool management,and expounds the research results from the aspects of problem requirements,scheme ideas,test verification and so on.It will provide practical references for government network and Internet applications in multiple scenarios and in-depth security protection projects such as daily security operation and maintenance,network security guarantee for major activities(hereinafter referred to as“Re Insurance”)and customization of security services,and further promote the formation of a national e-government extranet security resource pool standard system.

关 键 词：安全资源池 安全组件 安全策略 服务编排 统一管理 多层防护 

分 类 号：TN915.08[电子电信—通信与信息系统]