基于全生命周期的运营商安全管理平台安全策略模型分析

Based on the full life cycle analysis of the operation safety management platform security policy model

随着互联网的全球化,网络安全隐患呈专业化态势。为强化运营商网络安全领域管控力度,针对运营商安全管理平台提出一种基于PDCA及全生命周期的策略模型。通过深度剖析模型的功能架构、层次结构及业务数据流以探索最优模型设计,最终达到安全管理平台安全事件可发现、可管控、可运维、可测量的建设目标。实践表明,基于全生命周期的安全管理平台策略模型很好地实现了针对危险的主动发现、主动告知及主动防护。

With the globalization of the Internet,network security hides danger in specialization. To strengthen the operator network security field control,for operator security management platform,this paper proposes a model based on PDCA and the strategy of the whole life cycle. Through deep analysis of the model function architecture,hierarchy,and the business data stream it explores the optimal model design,ultimately achieving the targ et that safety management platform security events can be found,controlled,operated,and measured. Practice shows that the security management platform strategy model based on whole life cycle can well implement active discovery,active and initiative protection of the danger.