某省地税信息安全规划方案.docx

XX 省地税信息安全

规划方案

XX 有限公司

1 概述.................................................................................................................................................................5

1.1 背景介绍 ....................................................................................................................................................5

1.2 规划目标 ....................................................................................................................................................6

1.3 规划范围 ....................................................................................................................................................6

1.4 规划原则 ....................................................................................................................................................7

2 现状分析.........................................................................................................................................................8

2.2 应用现状 ..................................................................................................................................................12

2.2.1

.................................................................................................................................12

2.2.2

.................................................................................................................................13

2.2.3

.................................................................................................................................13

2.2.4

.................................................................................................................................13

2.2.5

.................................................................................................................................13

2.2.6

.................................................................................................................................14

2.3 安全现状 ..................................................................................................................................................14

3 安全风险分析...............................................................................................................................................14

3.1 边界风险分析 ..........................................................................................................................................14

4.1 边界安全需求分析 ..................................................................................................................................19

4.1.1

.................................................................................................................................20

4.1.2

.................................................................................................................................20

4.1.3

.................................................................................................................................21

4.2 内网安全需求分析 ..................................................................................................................................21

4.2.1

.................................................................................................................................21

4.2.2

.................................................................................................................................21

4.2.3

.................................................................................................................................22

4.2.4

.................................................................................................................................22

4.3 应用安全需求分析 ..................................................................................................................................22

5.1 整体安全框架 ..........................................................................................................................................25

5.2 边界安全规划 ..........................................................................................................................................26

5.2.1

5.2.2

5.3 内网安全规划 ..........................................................................................................................................32

5.4 应用安全规划 ..........................................................................................................................................34

5.5 安全管理规划 ..........................................................................................................................................40

5.6 规划实现效果 ..........................................................................................................................................41

6 安全建设方案...............................................................................................................................................42

6.1 建设内容 ..................................................................................................................................................42

6.3.1.1 部署说明.....................................................................................................................................................46

6.3.1.2 具体功能.....................................................................................................................................................47

6.3.2

6.3.2.1 部署说明.....................................................................................................................................................59

6.3.2.2 具体功能.....................................................................................................................................................60

6.4 内网安全建设 ..........................................................................................................................................62

6.4.1

6.4.2

6.5 应用安全建设 ..........................................................................................................................................70

6.5.1

8 方案总结.......................................................................................................................................................83