一种网络安全管理区的设计  

The Design of a Network Security Management Area

作　　者：赵卫彬 ZHAO Weibin(Henan Sub-bureau of Central South Air,Traffic Nanngement Bureau CAAC,Zhengzhou 450000,Henan,China)

机构地区：[1]中国民用航空中南地区空中交通管理局河南分局,河南郑州450000

出　　处：《民航学报》2025年第1期59-62,共4页Journal of Civil Aviation

摘　　要：本文针对空管部分在用系统由于设计较早,考虑不全面、安全防护设备功能模块不足等造成系统不能满足网络安全保护等级测评要求及实际工作需求的问题,在分析网络安全保护等级对第三级系统测评要求的基础上提出一种网络安全管理区的设计方案。该网络安全管理区可以评判用户的操作、分析及监控网络流量、审计系统运行日志、定期检测网络漏洞扫描,进而从主、被动方面实现系统网络安全防护,为系统提供平稳的网络环境。Aiming at the problems that some of the air traffic control system in use cannot meet the requirements of network security protection level evaluation and the actual work requirements due to early design, inadequate consideration and insufficient functional modules of security protection equipment, this paper proposes a design scheme of network security management area based on the analysis of the requirements of network security protection level for third-level system evaluation. The network security management area can judge user operations, analyze and monitor network traffic, audit system operation logs, and regularly detect network vulnerability scanning,realizing system network security protection from active and passive aspects, and providing a stable network environment for the system.

关 键 词：网络安全 等保测评 网络安全管理区 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]