从勒索蠕虫事件再谈终端安全保障思路与方法

Thoughts and Methods for Terminal Security From the Point of View of Wannacry

针对政府联网计算机终端面临的安全形势与挑战,分析终端安全的特点与现状,指出重信息系统防护、轻终端计算机安全是当前国内信息安全保障工作的典型问题。阐述了终端安全保障的思路和方法,以标准化的安全配置、体系化的安全管理的主动防护模式来有序、有力应对网络安全威胁,从根本上提升政府联网计算机终端的安全防护能力。强调了贯彻落实GB/T 32925-2016《信息安全技术政府联网计算机终端安全管理基本要求》的重要性和必要性,弥补政府终端安全保障工作中存在的短板,提升政府联网计算机终端安全保障水平。

In view of the situation and challenges laced by the government networked computer terminal security, analyzes the characteristics and the status of terminal security, points out that the way of the heavy protection inlbrmation system and light terminal computer security is typical, expounds the ideas and methods of terminal security, active protection mode in a standardized and systematic security configuration safety management to orderly and effectively respond to the threat of network security, enhance security capabilities of government networked computer terminal fundamentally. It also stressed the importance and necessity of implementing GB/T 32925-2016 ＂Information Security Technology-Basic Security Requirements for Networked Computer Terminals of Government＂, which will make up the short board the terminal security work, and enhance the security level of the government network computer terminal.