网络安全攻防演练的部署与方案设计

Brief Discussion of the Deployment and Design of Field Exercises on Internet Security

开展网络安全攻防实战演练,针对面向互联网的业务系统,模拟黑客入侵和攻击,发现安全漏洞和隐患,有效识别、分析和控制信息系统安全风险,将有效提升运维人员安全意识和安全突发事件处置能力,提升信息系统安全保障能力。论文结合面向新闻信息系统开展安全攻防演练的工作实践,对攻防实战演练的部署与方案设计进行分析与探讨。

The task is to promote field practices on strategies of defense and offence, by directing against Internet business systems; simulating hacking intrusions and attacks; finding security breach and potential threats. Only by identifying, analyzing, and controlling system security, can we effectively raise the awareness of technicians and their ability to deal with unexpected events, thus elevating the safeguarding ability of the information system. By incorporating practice dealing with the field exercise of defense and offence of the news information system, this article analyzes and explores the deployment and design of such field exercises.