基于旁路接入的医院服务器漏洞屏蔽系统研究  

Research on hospital server vulnerability shielding system based on bypass access

作　　者：陈拥军 周晓敏 陈微 陈泓伶 CHEN Yongjun;ZHOU Xiaomin;CHEN Wei;CHEN Hongling(Information Department,the 921st Hospital of Joint Logistics Support Force,Changsha 410003,Hunan Province,China)

机构地区：[1]联勤保障部队第921医院信息科,长沙410003

出　　处：《中国数字医学》2024年第7期102-105,共4页China Digital Medicine

摘　　要：目的:加强医院服务器漏洞全生命周期管理,防止黑客实施攻击。方法:基于医院现有网络架构,将漏洞屏蔽系统以旁路方式接入医院核心交换机,配置屏蔽策略,阻止漏洞扫描和利用行为,实现对漏洞的闭环管理。结果:服务器存在的中高危漏洞被屏蔽,外部探测获取不到中高危漏洞信息,极大提高了服务器的安全性。结论:基于旁路接入的医院漏洞屏蔽系统部署简单,实现方便,可为医院服务器管理提供参考。Objective To strengthen the whole lifecycle management of hospital server vulnerabilities and prevent from hackers attacks.Methods Based on the existing network architecture of the hospital,the vulnerability shielding system was connected to the hospital core switch in bypass mode.The shielding strategy was configured to prevent the vulnerabilities scanning and exploitation behavior,and the closed-loop management of vulnerabilities was realized.Results The medium and high risk vulnerabilities existed in the server were shielded,and the information of medium and high risk vulnerabilities could not be obtained by external detection,which greatly improved the security of the server.Conclusion The hospital vulnerability shielding system based on bypass access is simple to deploy and convenient to implement,and can provide reference for hospital server management.

关 键 词：医院网络安全 旁路接入 漏洞屏蔽 漏洞管理 

分 类 号：TP393[自动化与计算机技术—计算机应用技术] R319[自动化与计算机技术—计算机科学与技术]