以网络态势感知平台为核心的医院局域网安全运维实践

Practice of Hospital LAN Safety Operation and Maintenance with the Core of the Network Situation Awareness Platform

目标:以态势感知平台为核心阐述医院局域网运维中主动防御系统设计以及具体实现。方法:探索平台技术原理,打造集检测、可视、响应等多功能一体的大数据安全分析平台和安全运营中心。结果:指出该平台从医院网络边界、内部网络、终端等方面可以提供全方位防护,极大提高响应威胁的时效性和精准度。结论:提高局域网运维的效率,降低网络安全风险的发生概率,可为同级别医院提供有价值的参考。

Objective:Taking the situation awareness platform as the core,the design and implementation of the active defense system in the hospital LAN operation and maintenance are explained.Methods:Explore the technical principles of the platform and build a big data security analysis platform and security operation center that integrates detection,visualization,and response.Results:It is pointed out that the platform can provide comprehensive protection from the aspects of hospital network boundaries,internal networks,terminals,etc.,which greatly improves the timeliness and accuracy of responding to threats.Conclusion:Improving the efficiency of LAN operation and maintenance and reducing the probability of network security risks can provide a valuable reference for hospitals at the same level.