移动接入解决方案持续监测机制研究

Continuous Monitoring Mechanism of Mobile Access Solution

针对处理机密信息的终端用户设备通过移动通信网安全接入相同保密等级的政府机构内部网络或政府合作企业内部网络的问题,美国国家安全局基于商用密码产品和安全产品给出了双层加密和持续监测的移动接入整体解决方案。解决方案提出了持续监测框架、监测点位置、监测数据收集方法,以及监测点选择、告警触发条件等实施要求。对各监测点网络流量特征、安全事件数据汇集手段、系统动态安全模型的分析,可为基于移动通信网等开放网络的虚拟私有专网整体监测方案设计提供参考。

For the end-user devices that handle confidential information securely access an internal network of government agencies or government co-operatives at the same level of secrecy via the mobile communication network,the NSA gives the mobile access overall solution for double-layer encryption and continuous monitoring based on commercial crypto products and security products.The solution proposes implementation requirements for continuous monitoring framework,monitoring-point location,monitoring data collection methods,monitoring-point selection,and alarm trigger conditions.Analysis on the network traffic characteristics,security event data collection means,and system dynamic security model of each monitoring point can provide reference for the design of overall monitoring scheme of virtual private networks based on open networks such as mobile communication networks.