复杂信息网络的安全防御体系构建原则研究

Research on Design Principles of Secure Defense System for Complex Information Network

针对复杂信息网络的特点,从网络的脆弱性、广域性、复杂性、机动性、集成性、开放性等方面,分析了导致复杂信息网络安全问题的根源,从体系原则、木桶原则、多维结构、纵深结构、多技术集成、针对性、实时更新等方面,提出了构建复杂信息网络防御体系的原则,并分析了美国海军的计算机网络纵深防御体系。

Based on the characteristics of complex information network, the original reasons to cause its security problem are analyzed from its vulnerability, wide-area, complexity, mobility, integration and openness, etc. The principles to design a defense system are put forward using system of systems principle, wooden barrel principle, multi-dimension structure, deep structure, multi-technology integration, pertinence of special requirement and real-time update, etc. At last,the ＂Defense in Depth＂ defense system of US Navy computer network is analyzed.