我国关键信息基础设施安全风险及对策建议  

Security Risks and Countermeasure Suggestions of China’s Critical Information Infrastructure

作　　者：李磊[1,2,3] 刘生昊 王婧 Li Lei;Liu Shenghao;Wang Jing(School of Cyber Science and Engineering,Huazhong University of Science and Technology,Wuhan Hubei,430074;Hubei Key Laboratory of Distributed System Security,Wuhan Hubei,430074;Hubei Engineering Research Center on Big Data Security,Wuhan Hubei,430074;School of Software Engineering,Huazhong University of Science and Technology,Wuhan Hubei,430074)

机构地区：[1]华中科技大学网络空间安全学院,湖北武汉430074 [2]分布式系统安全湖北省重点实验室,湖北武汉430074 [3]湖北省大数据安全工程技术研究中心,湖北武汉430074 [4]华中科技大学软件学院,湖北武汉430074

出　　处：《工业信息安全》2025年第1期2-7,共6页Industry Information Security

摘　　要：随着数字化转型的不断加深,关键信息基础设施与实体经济、民生高度绑定,成为社会运转的核心支撑。关键信息基础设施承载着信息化业务,具有敏感性强、社会关注度高等特点,面临着复杂的威胁环境,安全问题更加广泛和突出。因关键基础设施遭遇勒索软件攻击造成的经济损失,正持续威胁着整个社会的安定和经济繁荣。近期全球多地关键信息基础设施故障频发,在国内外引起广泛关注。文章从梳理我国关键信息基础设施涉及的平台故障频发现状入手,深入剖析我国关键信息基础设施面临的安全风险,并在借鉴西方国家相关举措的基础上,结合我国国情提出防控对策建议。With the continuous deepening of digital transformation,critical information infrastructure has been highly intertwined with the real economy and people's livelihood,becoming the core support for social operation.Critical information infrastructure undertakes information-based business.It is characterized by high sensitivity and a high degree of public concern.Facing a complex threat environment,its security issues are more widespread and prominent.The economic losses caused by ransomware attacks on critical infrastructure are continuously threatening the social stability and economic prosperity of the whole society.Recently,the failures of multiple critical information infrastructure around the world have drawn widespread attention.This paper starts from reviewing the current situation of frequent platform failures involving China's critical information infrastructure,conduct an in-depth analysis of the security risks faced related to China's critical information infrastructure,and finally puts forward suggestions on prevention and control countermeasures based on learning from the relevant measures of Western countries and combining with China's national conditions.

关 键 词：关键信息基础设施 平台故障 网络安全 安全风险防控 

分 类 号：TP3[自动化与计算机技术—计算机科学与技术]