基于网络流向的烟草企业网络安全策略研究

Research on Network Security Strategies of Tobacco Enterprises Based on Network Flow

基于网络流向的安全策略梳理目的是全面、准确梳理网络各类数据流向、内容、有针对性开展安全控制,通过数据流量的采集,对目标域间的流量进行分析,根据业务及管理的逻辑,定义设备连接关系的白名单,最终实现保护重要资产的目标。笔者首先对网络安全策略需求进行了简单的分析,然后针对一些问题提出了一些建设性的意见,希望有助于烟草企业的网络安全质量的提升。

The purpose of combing based on the network flow security strategy is to comprehensively and accurately sort out various data flow, content, and targeted security controls of the network. Through the collection of data traffic, the traffic between the target domains is analyzed. According to the logic of business and management, define the whitelist of device connection relationships, and finally achieve the goal of protecting important assets. The author first analyzes the network security policy requirements briefly, and then proposes some constructive opinions on some issues. It hopes to help improve the network security quality of tobacco companies.