摘要
网络安全已成为国家安全战略的高地。高等院校在智慧校园建设过程中积累了大量网络信息资产,缺少必要监管的资产存在重大安全隐患,可能引发网络安全事件。针对高校网络资产安全管理现状和普遍存在的问题,遵从风险管理理念,结合实践经验,将高校网络资产安全管理划分为SDCA四个阶段,提出在S阶段制定标准化网络资产管理规范、D阶段执行网络资产日常安全管理、C阶段建设基于信息化管理工具、A阶段加强模拟演练等建议。
In recent years,network security has become the highland of national security strategy.In the process of smart campus construction,colleges and universities have also accumulated many network and information assets.Some of the assets lacking necessary supervision may cause major security risks and lead to major network security incidents.Aiming at the current situation and common problems of network asset security management in colleges and universities,this paper follows the concept of risk management and combines practical experience to divide the network asset security management in colleges and universities into four stages:SDCA(Standardization Do Check Action)cycle.It is proposed that standardized network asset management specifications should be formulated in stage S,daily security management of network assets should be implemented in stage D,information-based management tools should be built in stage C,and simulation exercises should be strengthened in stage A.
作者
梁凯
张巍
LIANG Kai;ZHANG Wei(Information Technology Center,Luoyang Institute of Science and Technology,Luoyang 471023,China)
出处
《洛阳理工学院学报（社会科学版）》
2024年第1期53-55,共3页
Journal of Luoyang Institute of Science and Technology：Social Science Edition
基金
中国高校产学研创新基金“多源特征融合的网络安全态势评估方法研究”(编号:2021ITA07021)的阶段性成果。
