3.12 机房消防系统设计说明 ...............................................................................................18
3.13 机房门禁控制系统设计说明........................................................................................19
3.14 机房监控系统设计说明 ...............................................................................................20
4 网络安全建设 ............................................................................................................................21
4.1 物理环境安全 .................................................................................................................22
4.2 通信网络安全 .................................................................................................................22
4.2.1 安全区域划分 ......................................................................................................22
4.2.2 关键网络设备冗余 ..............................................................................................23
4.2.3 通信链路加密 ......................................................................................................23
4.3 区域边界安全 .................................................................................................................23
4.3.1 跨边界通信访问控制 ..........................................................................................23
4.3.2 入侵防范 ..............................................................................................................23
4.3.3 非法外联监控 ......................................................................................................23
4.3.4 全流量威胁感知系统 ..........................................................................................24
4.3.5 Web 攻击检测与防御...........................................................................................24
4.3.6 上网行为管理 ......................................................................................................24
4.4 计算环境安全 .................................................................................................................24
4.4.1 主机身份鉴别 ......................................................................................................24
4.4.2 访问控制 ..............................................................................................................25
4.4.3 系统安全审计 ......................................................................................................25
4.4.4 用户数据完整性保护 ..........................................................................................25
4.4.5 日志统一收集与分析 ..........................................................................................26
4.4.6 恶意代码防范 ......................................................................................................26
4.5 数据安全 .........................................................................................................................26
4.5.1 数据库防护与审计 ..............................................................................................26
4.6 安全运营中心建设 .........................................................................................................26
4.6.1 指挥运营中心 ......................................................................................................27
4.6.2 安全态势 ..............................................................................................................27
4.6.3 安全事件管理 ......................................................................................................29
4.6.4 ATT&CK 攻击热力图 ............................................................................................30
4.6.5 威胁溯源 ..............................................................................................................30
4.6.6 资产风险评估 ......................................................................................................30
4.6.7 自动化报告 ..........................................................................................................31
4.6.8 安全知识库 ..........................................................................................................31
4.6.9 持续评估 ..............................................................................................................31
4.6.10 预案编排与自动化响应 ....................................................................................32
4.6.11 指挥调度 ............................................................................................................32
4.6.12 检测分析中心 ....................................................................................................33
4.6.13 情报检测分析 ....................................................................................................33
4.6.14 样本查杀检测 ....................................................................................................34
4.6.15 关联分析 ............................................................................................................35
4.6.16 终端行为分析 ....................................................................................................36
4.6.17 网络行为分析 ....................................................................................................36
4.6.18 APT 检测 ..............................................................................................................36
评论0