安全基线检查系统研究

Research on auditing system for safety base line

广义的安全基线包括技术层面和管理层面,狭义的安全基线仅包括技术层面。技术层面的安全基线包括漏洞扫描和配置检查。实践表明通过建立并实现安全基线,很好地监控了当前信息系统的安全状况。

The generalized safety base line included technology level and management level, and the narrow safety base line only included technology level. The safety base line of technology level included vulnerability scanning and configuration inspection. The practice showed that by establishing and realizing the safety base line, the security status of current information system could be better monitored.