央企在网络安全新形势下的动态防御体系研究与应用  

Research and Application of Dynamic Defense System forCentral Enterprises in the New Situation of Cyber Security

作　　者：刘秀 LIU Xiu(China Hualu Group Co.,Ltd.,Dalian Liaoning 116023,China)

机构地区：[1]中国华录集团有限公司,辽宁大连116023

出　　处：《信息安全与通信保密》2023年第9期87-95,共9页Information Security and Communications Privacy

摘　　要：网络安全的本质是对抗,针对当前高水平和快速变化的安全威胁,为适应央企在网络安全新形势下的应用以及业务体系快速叠加演进所带来的安全风险和威胁,须改变传统被动防护的安全管理和技术体系,使之更加智能、快速、弹性地应对突发的安全威胁,并在威胁处置过程中不断进行防御策略的优化、网络空间环境的塑造,将网络和信息安全防护工作从被动响应变为主动防御,能够对日趋复杂的网络攻击进行更为精准的发现与打击,形成统一闭环的动态安全防御体系。The essence of cyber security is confrontation.In view of the current high-level and rapidly changing security threats,in order to adapt to the application of central enterprises in the new situation of cyber security as well as the security risks and threats brought about by the rapid superposition and evolution of business system,the conventional passive protection of the security management and technology system must be changed so that it can be more intelligent, fast and resilient to respondto sudden security threats, and in the course of the threat disposal process, constantly carry out theoptimization of the defense strategy and the shaping of the cyberspace environment. Thus, the networkand information security protection work is changed from passive response to active defense, which candetect and attack the increasingly complex cyber attacks more accurately, forming a unified closed-loopdynamic security defense system.

关 键 词：动态防御 威胁猎杀 防御效能验证 对抗式威胁评估 

分 类 号：TN915.08[电子电信—通信与信息系统]