借鉴ICS构建高校网络安全防御体系研究
Research on constructing network security defense system for colleges and universities by drawing on ICS
徐秀珍 1许黔鑫 1牛义锋1
作者信息
摘要
[目的/意义]随着高校信息化建设的不断深入,网络信息系统安全问题日益突出,传统的网络安全防措施难以有效地应对日益复杂的网络入侵.为此,将工业控制系统(ICS)的安全策略应用于高校网络信息安全系统中,制定出适合高校的综合性网络安全防御体系.[方法/过程]从高校的系统级、应用级和用户级三个安全方面对其网络安全进行分析和评估,并根据分析结果制定出适合于高校的综合性网络安全防御体系.[结果/结论]将ICS的安全策略应用于高校网络信息安全系统的可行性和效果,并通过对高校网络的分析,揭示了网络安全存在的薄弱环节和潜在威胁,为高校网络安全的提升提供有力的依据.
Abstract
[Purpose/Significance]With the informationization construction of colleges and universities continues to deepen,network information system security issues become increasingly prominent,the traditional network security defense measures are difficult to effectively deal with the increasingly complex network intrusion,this paper applies the security strategy of industrial control system(ICS)in the network information security system of colleges and universities,and develops a comprehensive network security defense system suitable for colleges and universities.[Method/Process]It analyzes and evaluates the network security of colleges and universities from three aspects:system-level auditing,user-level auditing,and system-level auditing,and develops a comprehensive network security defense system suitable for colleges and universities based on the analysis results.[Results/Conclusion]In this study,we explore the feasibility and effectiveness of applying the security policy of(ICS)to the information security system of university network.By analyzing the university network,the weaknesses and potential threats of network security are revealed.This provides a strong basis for the enhancement of network security in colleges and universities.
关键词
工业控制系统/网络安全审计/高校网络/安全防御体系/网络安全Key words
industrial control systems/network security audit/higher education network/security defense system/network security引用本文复制引用
基金项目
重庆市教育科学"十四五"规划2022年度重点课题(K22YD206082)
出版年
2024
NETL
NSTL
万方数据