摘要
网络攻防实战演练是以检验企业内部网络空间安全整体防御能力,以实际运行的信息系统作为演练标靶,通过不限制攻击路径、攻击时间、攻击目标,以提权、控制业务、获取数据为演习目的方式开展攻、防对抗,最大限度地模拟真实的网络攻击。通过网络攻防演练,有效识别了企业内部网络安全存在不足及可采取防范措施,进一步提升了企业内部整体的网络空间安全及抵御能力。
The network attack and defense actual combat drill is to test the overall defense capability of the internal network space security of the enterprise,take the actual operation information system as the target of the drill.Through unrestricted attack path,attack time and attack target,the actual operation of the network attack and defense drill is conducted with the purpose of lifting power,controlling business and obtaining data,and simulating the real network attack to the maximum extent.Through the network attack and defense drill,we can effectively identify the deficiencies in the internal network security of the enterprise and take preventive measures,further enhance the overall network space security and resistance within the enterprise.
作者
张剑峰
ZHANG Jian-feng(Guangdong Shunchang Technology Co.,Ltd.,Jiangmen Guangdong 529000)
出处
《数字技术与应用》
2021年第5期175-177,共3页
Digital Technology & Application
关键词
网络攻防演练
网络安全防护
风险分析
Network attack and defense drill
Network security protection
Risk analysis