摘要
以信息系统安全等级保护基本要求为基础,以信息系统等级保护安全设计技术要求为指导,按照分区、分域、分级的防护方针,结合安全管理中心、区域边界安全防护、本地计算环境防护、通信网络安全防护和相关技术手段与功能要求,设计出信息系统安全防护框架体系。并提出了信息系统安全等级保护的整体安全防护策略,以及不同信息系统间共用资源的安全防护策略。供各行各业在开展信息系统安全等级保护规划设计与实施建设时参考。
Based on basic requirement of information system classified protection, and with the guidance of information system classified protection security design technical requirement, the information system security protection framework system is designed according to the subarea, sub-region and classification protection policy, in combination with the security management centre, regional border security protection, the local computing environment protection, communication network security protection and relevant technical means and function requirements. Meanwhile, the overall security protection strategy for information system security protection is proposed, including and the security protection policy for the shared resources of between the different information systems. This could serve as a reference for various industries in the information system classified protection design and implementation.
出处
《通信技术》
2011年第12期98-100,103,共4页
Communications Technology
关键词
等级保护
分区
分域
分级
安全管理中心
classified protection
subarea
divided region
classification
security management centre
