基于零信任的企业数据安全立体管控体系  

Enterprise Data Vertical Security Control and Management Architect Based on Zero Trust Concept

作　　者：苗雷 郝文姣 单海波 宁黄江 MIAO Lei;HAO Wenjiao;SHAN Haibo;NING Huangjiang(Beijing 6CloudTech Information Tech.,Co.Ltd.,Beijing 100085;China Center for Information Industry Development,Beijing 100081;China Software Testing Center,Beijing 100081)

机构地区：[1]北京六方云信息技术有限公司,北京100085 [2]中国电子信息产业发展研究院,北京100081 [3]中国软件评测中心,北京100081

出　　处：《中国科技纵横》2024年第19期49-53,共5页China Science & Technology Overview

摘　　要：本文对企业在数据安全建设过程中存在的问题进行了系统梳理,针对存在的重要数据泄露及数据篡改等安全风险,提出了基于零信任架构的包含平台、网络、终端三重立体管控体系,并围绕该体系阐述了数据安全关键业务模块及相关业务流程,以期为数据安全建设工作提供有益参考和借鉴。This paper systematically state the situation encounter by enterprises in the process of data security construction.To address security risks such as important data leaks and tampering,a three-dimensional control and management system based on a zero trust architecture is proposed,which includes platforms,networks,and endpoint.The key business modules and related processes are also described within this paper,,in order to provide useful reference and inspiration for data security construction work.

关 键 词：零信任 数据安全 网络安全 数据安全管控 

分 类 号：TP393.092[自动化与计算机技术—计算机应用技术]