OPSEC在电力企业网络安全管理中的应用  

APPLICATION OF OPSEC IN NETWORK SECURITY MANAGEMENT FOR POWER ENTERPRISES

作　　者：黄天戍[1] 孙夫雄[1] 向继东[1] 俞劲松[1] 

机构地区：[1]武汉大学电子信息学院,湖北省武汉市430072

出　　处：《电力系统自动化》2003年第13期54-57,共4页Automation of Electric Power Systems

基　　金：华中电力集团公司科技 (开发 )资助项目 (KJ990 1 10 2 2 1)

摘　　要：网络防火墙作为一种通用的网络安全产品 ,并不能完全满足电力企业的实际需要和特定的场合 ,用户往往不得不借助于第三方的安全产品或自己开发的安全软件 ,因而存在如何与现有的网络安全系统形成一个整体的企业安全体系问题。针对该问题 ,文中介绍了在OPSEC(开放安全企业互联平台 )的开发环境下 ,以目前几种常见的黑客攻击手段 (DDOS ,Trojanhorses与Port Scan)为研究对象 ,利用开放性协议OPSEC提供的公用接口 ,将设计的自动入侵检测报警的安全软件作为一个扩展的防火墙管理模块嵌入到支持OPSEC的企业网络防火墙中 ,配合原有的防火墙管理模块共同防御黑客攻击的开发实践。As a kind of commonly used product of network security, the network firewall is not capable of meeting all actual needs and special occasions of power enterprises. Very often users have to resort to other security software or develop it by themselves. Hence the problem of the enterprise security system of how to integrate the new software with the current network security system into an organic whole is put forward. Taking such commonly used hacker attack methods as DDOS, Trojan horses and Port-Scan as objects of research, under the development environment of open platform for secure enterprise connectivity (OPSEC) and by use of the communal interface provided by OPSEC, a development practice is introduced, in which the designed security software for automatically detecting invasion and alarming is embedded in an OPSEC supporting enterprise firewall as an extensive firewall management module, together with the old firewall management module to defend hacker attacks.

关 键 词：计算机系统的安全与保密 开放安全企业互联平台 防火墙 诊断模块 安全阈值 特征码信息库 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]