基于RPA技术的网络安全运营自动化实践应用研究  

Application research on network security operation automation practice based on RPA technology

作　　者：周映 ZHOU Ying(Software Research Institute of China United Network Co.,Ltd.,Beijing 100176,China)

机构地区：[1]中国联合网络通信有限公司软件研究院,北京100176

出　　处：《电信科学》2024年第7期164-174,共11页Telecommunications Science

摘　　要：研究了围绕网络与信息系统的全生命周期,面向网络安全运营全流程场景,以机器人流程自动化(robotic process automation,RPA)技术和自适应网络安全技术建立能力框架,以期解决网络安全运营工作人工依赖性高、网络安全能力平台相对割裂、网络安全运营工作要点缺失等普适性痛点问题。构建了基于RPA技术的网络安全运营自动化平台,实现主要日常性网络安全工作的自动化转型,并将剩余人力资源配置到暂时不能自动化的领域,如业务层网络安全分析、业务网络安全渗透、漏洞挖掘、自动化运营脚本编制等方面,最终达到缓解人力不足,解决人员缺失,避免网络安全工作覆盖面不全、效能不高等目的。The research focuses on the entire lifecycle of networks and information systems,aiming at the full-process scenarios of cybersecurity operations.It establishes a capability framework based on robotic process automation(RPA)technology and adaptive cybersecurity technology,along with address the common pain points in cybersecurity operations,such as high manual dependency,relatively fragmented cybersecurity capability platforms,and missing key points in cybersecurity operations.By constructing an automated cybersecurity operation platform based on RPA technology,the automation transformation of daily cybersecurity work was realized,and the remaining human resources were allocated areas that cannot be automated at the moment,such as business-level cybersecurity analysis,business network security penetration,vulnerability mining,and automated operation script development.Ultimately,it aims to alleviate the contradiction of insufficient manpower,reduce personnel shortages,and improve the coverage and efficiency of cybersecurity work.

关 键 词：机器人流程自动化 网络安全运营自动化平台 网络安全策略管理 网络安全运营体系 网络安全 

分 类 号：TP391[自动化与计算机技术—计算机应用技术]