摘要
随着国家电网公司信息安全专项治理工作的推进,针对信息内网越来越多的在线监测采集、缴费、视频监控、桌面计算机等各类终端设备,围绕网络设备、网络资源及终端设备三类网络构成要素,依据P2DR动态安全模型,结合桌面终端标准化管理系统(VRV)和趋势防病毒系统监测审计数据,建立终端安全评价模型,利用交换机控制技术建立全网资源管理应用指标体系和内网终端主动式安全防御体系,形成了市县信息网络垂直一体化安全管理多重防护与联动管控机制,实现了全网资源统一管理和异常终端的快速处理,极大地提升了信息安全管控与主动防御水平。
With the advance of the information safety governance work of the State Grid Corporation of china, various kinds of terminal equipments are appearing at information network, including online monitoring and acquisition, payment, video surveillance and desktop computer. According to three elements of the network （network devices, network resource and terminal equipment）, this paper established terminal security evaluation model, basis for P2DR dynamic security model, standardized management system of desk top terminal （VRV） as well as monitoring and audit data on trend antivirus system. Switch control technology was used to build index system of the whole network resource management and application, as well as a proactive defense system for network terminals of power supply enterprises Thus, multiple protections of safety management and linkage control mechanism for vertical integration of cities and countries information network were formed to realize unified management of the whole network resource and fast processing of abnormal terminals. The level of nformation security management and proactive defense was greatly enhanced
出处
《计算机安全》
2014年第12期61-64,共4页
Network & Computer Security
关键词
主动防御
安全审计
准入控制
动态管理
active defense
security audit
admission control
dynamic management
