校园网信息安全建设中安全基线的研究与应用

Research and Application of Security Baseline in the Campus Network Information Security Construction

随着高校教育信息化的深入开展,各种IT设备和应用系统数量不断增加,其安全管理问题成为关注的焦点。为了维持IT信息系统的安全并方便管理,必须设立满足安全要求的安全基准点来加强和落实安全要求。基于对安全基线管理的研究与分析,按照相关的信息系统安全等级保护制度的要求,为校园网的各类业务系统建立配置规范和安全基线,并开发相关的核查工具对校园网中的业务系统进行安全基线检查。安全基线在校园网信息安全建设中的应用开创了校园网安全基线建设工作的先河,提高了校园网安全管理效率和水平,从技术层面实现安全评估的自动化,完善校园网安全管理体系建设,对校园网信息安全建设具有一定指导意义。

With the development of higher education information construction,the number of various kinds of IT devices and applications increase,so its security issues have become the focus of every-one’s attention. In order to maintain the IT information system security and convenient management, we must set up the security reference point which meets the safety requirements to strengthen and im-plement the safety requirements. This article is based on the research and analysis of security baseline management and according to the requirements of the relevant information system security level protec-tion system to establish standardized configuration and security baseline for business system in campus network and develop the verification tools for security baseline examination. The application of securi-ty baseline in the campus network information security construction creates a campus network security baseline construction work precedent,improves the efficiency and level of campus network security management,achieves the automation of safety assessment at the technical level,and improves the construction of the campus network security management system. It has certain guiding significance for the construction of the campus network information security.