基于零信任网络的APT攻击的分析与防御模型初探  

Analysis and Defense Model Exploration of APT Attacks Based on ZeroTrust Networks

作　　者：韩奕昕 HAN Yixin(Hebei Provincial Bureau of Statistics,Shijiazhuang Hebei 050051,China)

机构地区：[1]河北省统计局,河北石家庄050051

出　　处：《长江信息通信》2024年第12期128-131,共4页Changjiang Information & Communications

摘　　要：当今社会互联网技术信息的飞速发展,计算机网络工程中存在大量的风险因素,网络攻击也日渐凸显,并且成为社会发展的热门话题。APT攻击在近年愈演愈烈,逐渐表现为高渗透、专业性和多态性与危害性等特点,严重威胁着国家安全和社会稳定。文章以APT攻击为探讨方向,剖析其攻击特点、攻击过程,并提出基于零信任架构的防御模式,以建构出一种安全化的网络运营环境。With the rapid development of Internet technology,there are a large number of risk factors in computer network engineering.Network attacks are also increasingly prominent,and become a hot topic in social development.APT attacks have become increasingly severe in recent years,which is characterized by permeability,professionalism,polymorphism and perniciousness,posing a serious threat to national security and social stability.This paper takes APT attacks as the exploration direction,analyzes their attack characteristics and process,and proposes a defense mode based on zero trust architecture,in order to construct the safe network operating environment.

关 键 词：APT攻击 零信任架构 网络安全防御 

分 类 号：TP391[自动化与计算机技术—计算机应用技术]